autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-desktop-iconsUpgrade webkit2gtk3Upgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-apps-menuUpgrade gnome-classic-sessionUpgrade vinoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-places-menuUpgrade gnome-sessionUpgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade accountsservice-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gdmUpgrade gnome-session-xsessionUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-calculatorUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3-develUpgrade gnome-session-wayland-sessionUpgrade gnome-shellUpgrade mutter-develUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-settings-daemonUpgrade gtk3Upgrade gnome-control-centerUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-top-iconsUpgrade LibRawUpgrade LibRaw-develUpgrade gnome-online-accountsUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3-jsc-develUpgrade gnome-softwareUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-autoarUpgrade webkit2gtk3-jscUpgrade mutterUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-workspace-indicatorUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-commonUpgrade gnome-software-develUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-gesture-inhibitor | May 4, 2022 | Mar 17, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Mar 17, 2021 |
| Centos_linux | — | Upgrade gnome-settings-daemonUpgrade LibRaw-debugsourceUpgrade mutter-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-session-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gnome-control-centerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-jsc-develUpgrade accountsserviceUpgrade accountsservice-debuginfoUpgrade gdm-debuginfoUpgrade gtk3Upgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-no-hot-cornerUpgrade mutterUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-window-grouperUpgrade gnome-sessionUpgrade gtk3-debugsourceUpgrade gnome-autoar-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gnome-autoarUpgrade LibRaw-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-top-iconsUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-drive-menuUpgrade vino-debugsourceUpgrade gnome-session-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-online-accounts-debuginfoUpgrade gnome-calculatorUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-online-accountsUpgrade gtk3-immodule-ximUpgrade gnome-shell-debuginfoUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-softwareUpgrade gdmUpgrade webkit2gtk3-jscUpgrade mutter-debugsourceUpgrade LibRawUpgrade gtk3-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-session-xsessionUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-classic-sessionUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-commonUpgrade gnome-shell-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gdm-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shellUpgrade LibRaw-samples-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade vino-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-kiosk-sessionUpgrade accountsservice-libsUpgrade vinoUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3 | Nov 10, 2021 | Mar 17, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Mar 17, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnome-autoar | May 18, 2021 | Mar 17, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 17, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-window-listUpgrade gnome-control-center-filesystemUpgrade mutter-develUpgrade gnome-shell-extension-top-iconsUpgrade accountsservice-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-user-themeUpgrade gnome-software-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-systemMonitorUpgrade LibRawUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-places-menuUpgrade gdmUpgrade webkit2gtk3-develUpgrade gnome-autoarUpgrade gsettings-desktop-schemas-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-disable-screenshieldUpgrade gtk3Upgrade mutterUpgrade webkit2gtk3Upgrade gnome-softwareUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shellUpgrade gnome-shell-extension-desktop-iconsUpgrade accountsservice-libsUpgrade gsettings-desktop-schemasUpgrade gtk3-develUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-drive-menuUpgrade gnome-online-accountsUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-dash-to-dockUpgrade vinoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-window-grouperUpgrade gnome-calculatorUpgrade gnome-sessionUpgrade gnome-shell-extension-commonUpgrade accountsserviceUpgrade gnome-control-centerUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-xsessionUpgrade LibRaw-devel | Nov 17, 2021 | Mar 1, 2021 |
| Redhat_linux | — | Upgrade gnome-session-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gtk3Upgrade gnome-online-accounts-develUpgrade gnome-calculatorUpgrade gnome-autoarUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk-update-icon-cacheUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk-update-icon-cache-debuginfoUpgrade mutter-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade LibRaw-develUpgrade gnome-shellUpgrade gnome-classic-sessionUpgrade accountsservice-libsUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-user-themeUpgrade gtk3-develUpgrade gdmUpgrade LibRaw-debugsourceUpgrade gnome-shell-debugsourceUpgrade vinoUpgrade gtk3-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gtk3-tests-debuginfoUpgrade accountsservice-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-calculator-debuginfoUpgrade vino-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-commonUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-window-grouperUpgrade gtk3-debugsourceUpgrade gdm-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-control-center-filesystemUpgrade gnome-settings-daemonUpgrade gnome-online-accountsUpgrade gnome-autoar-debuginfoUpgrade vino-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-softwareUpgrade gnome-software-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade accountsserviceUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-native-window-placementUpgrade mutter-debugsourceUpgrade gnome-shell-extension-updates-dialogUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade mutter-tests-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade accountsservice-develUpgrade gdm-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-debugsourceUpgrade gnome-session-debugsourceUpgrade mutterUpgrade gnome-shell-extension-workspace-indicatorUpgrade gsettings-desktop-schemas-develUpgrade mutter-develUpgrade gnome-software-develUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3-develUpgrade gnome-sessionUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-systemMonitorUpgrade LibRaw-debuginfoUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade LibRawUpgrade gnome-control-centerUpgrade gnome-autoar-debugsourceUpgrade gtk3-devel-debuginfo | Nov 10, 2021 | Mar 17, 2021 |
| Rocky_linux | — | Upgrade gnome-online-accounts-debugsourceUpgrade vino-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-settings-daemonUpgrade LibRaw-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gtk3-immodule-ximUpgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade mutter-debuginfoUpgrade gnome-shellUpgrade gnome-software-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-session-xsessionUpgrade accountsservice-libsUpgrade accountsservice-develUpgrade gtk3-devel-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-online-accounts-develUpgrade gnome-shell-debuginfoUpgrade gnome-calculatorUpgrade gnome-session-debugsourceUpgrade gtk3Upgrade gtk3-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gnome-sessionUpgrade gdm-debuginfoUpgrade webkit2gtk3Upgrade gnome-control-center-debugsourceUpgrade gnome-control-centerUpgrade gnome-settings-daemon-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-autoar-debugsourceUpgrade LibRawUpgrade accountsservice-debugsourceUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-online-accountsUpgrade gnome-session-kiosk-sessionUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gtk3-debuginfoUpgrade vino-debuginfoUpgrade gnome-shell-debugsourceUpgrade gdmUpgrade LibRaw-develUpgrade gnome-autoarUpgrade mutter-debugsourceUpgrade webkit2gtk3-jscUpgrade gnome-settings-daemon-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-software-debuginfoUpgrade gnome-session-debuginfoUpgrade gtk3-develUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-softwareUpgrade gnome-control-center-debuginfoUpgrade mutterUpgrade webkit2gtk3-debuginfoUpgrade vinoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-develUpgrade gdm-debugsourceUpgrade mutter-devel | Mar 12, 2024 | Mar 17, 2021 |
| Suse | — | Upgrade libgnome-autoar-gtk-0-0Upgrade typelib-1_0-gnomeautoar-0_1Upgrade libgnome-autoar-0-0Upgrade gnome-autoar-develUpgrade typelib-1_0-gnomeautoargtk-0_1 | Oct 26, 2022 | Mar 17, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0 | May 7, 2021 | Mar 17, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub