autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade webkit2gtk3-jscUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-commonUpgrade LibRaw-develUpgrade gnome-autoarUpgrade gnome-control-centerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-top-iconsUpgrade gnome-software-develUpgrade mutterUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-develUpgrade LibRawUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-softwareUpgrade gnome-shell-extension-workspace-indicatorUpgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-online-accountsUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-systemMonitorUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shellUpgrade accountsservice-libsUpgrade accountsservice-develUpgrade gnome-classic-sessionUpgrade gnome-session-xsessionUpgrade gdmUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3Upgrade mutter-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-settings-daemonUpgrade gnome-session-wayland-sessionUpgrade gtk3-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsserviceUpgrade vinoUpgrade webkit2gtk3Upgrade gnome-calculatorUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-apps-menuUpgrade gnome-sessionUpgrade gnome-shell-extension-window-grouperUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-places-menuUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-center-filesystem | May 4, 2022 | Mar 17, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Mar 17, 2021 |
| Centos_linux | — | Upgrade gnome-online-accountsUpgrade mutterUpgrade gnome-shell-extension-auto-move-windowsUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-online-accounts-debuginfoUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-calculatorUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-develUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-window-listUpgrade vino-debugsourceUpgrade gnome-control-centerUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-top-iconsUpgrade gtk3Upgrade gdm-debuginfoUpgrade gnome-control-center-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-software-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-sessionUpgrade LibRaw-debugsourceUpgrade LibRaw-debuginfoUpgrade gnome-autoarUpgrade gnome-autoar-debugsourceUpgrade mutter-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-session-debugsourceUpgrade accountsserviceUpgrade gnome-shell-extension-window-grouperUpgrade gtk3-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-settings-daemon-debuginfoUpgrade webkit2gtk3Upgrade gtk3-immodule-ximUpgrade mutter-debugsourceUpgrade LibRawUpgrade gnome-shell-debuginfoUpgrade accountsservice-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade gsettings-desktop-schemasUpgrade vinoUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-kiosk-sessionUpgrade accountsservice-libsUpgrade gnome-softwareUpgrade gnome-shellUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-calculator-debugsourceUpgrade vino-debuginfoUpgrade gdmUpgrade gnome-software-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-autoar-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-commonUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-session-xsessionUpgrade gnome-classic-sessionUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade webkit2gtk3-jsc | Nov 10, 2021 | Mar 17, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Mar 17, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnome-autoar | May 18, 2021 | Mar 17, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 17, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade mutterUpgrade webkit2gtk3Upgrade webkit2gtk3-jscUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-autoarUpgrade gnome-shellUpgrade gnome-softwareUpgrade gtk3Upgrade gsettings-desktop-schemas-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-systemMonitorUpgrade gdmUpgrade gnome-session-kiosk-sessionUpgrade mutter-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-classic-sessionUpgrade LibRawUpgrade gnome-shell-extension-window-listUpgrade gnome-software-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-panel-favoritesUpgrade accountsservice-develUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-control-centerUpgrade vinoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk-update-icon-cacheUpgrade gtk3-develUpgrade gnome-shell-extension-updates-dialogUpgrade accountsservice-libsUpgrade gnome-settings-daemonUpgrade gnome-session-xsessionUpgrade gnome-sessionUpgrade accountsserviceUpgrade gnome-shell-extension-commonUpgrade gnome-session-wayland-sessionUpgrade gnome-calculatorUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-drive-menuUpgrade gnome-online-accountsUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-no-hot-cornerUpgrade LibRaw-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-launch-new-instance | Nov 17, 2021 | Mar 1, 2021 |
| Redhat_linux | — | Upgrade LibRaw-samples-debuginfoUpgrade gnome-online-accountsUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-drive-menuUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-session-xsessionUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-jscUpgrade gnome-calculatorUpgrade LibRaw-develUpgrade gnome-shell-extension-window-grouperUpgrade vino-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-disable-screenshieldUpgrade mutter-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-session-debuginfoUpgrade LibRaw-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gdmUpgrade gtk3-debugsourceUpgrade gnome-autoarUpgrade vinoUpgrade gtk3-debuginfoUpgrade vino-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3Upgrade gnome-online-accounts-develUpgrade gdm-debugsourceUpgrade gnome-shell-extension-commonUpgrade gnome-shell-debugsourceUpgrade gnome-settings-daemonUpgrade accountsservice-libsUpgrade gnome-shell-extension-user-themeUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-classic-sessionUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shellUpgrade gnome-calculator-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-top-iconsUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-autoar-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gdm-debuginfoUpgrade gnome-sessionUpgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3-develUpgrade webkit2gtk3Upgrade gnome-control-centerUpgrade gnome-softwareUpgrade mutterUpgrade gnome-software-develUpgrade mutter-develUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-control-center-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-session-wayland-sessionUpgrade mutter-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-software-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade LibRawUpgrade gnome-shell-extension-auto-move-windowsUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-settings-daemon-debuginfoUpgrade accountsservice-develUpgrade gnome-shell-extension-window-listUpgrade LibRaw-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gsettings-desktop-schemasUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade accountsservice-libs-debuginfoUpgrade accountsserviceUpgrade gnome-shell-debuginfo | Nov 10, 2021 | Mar 17, 2021 |
| Rocky_linux | — | Upgrade gtk3-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-calculator-debuginfoUpgrade accountsserviceUpgrade webkit2gtk3-jsc-debuginfoUpgrade LibRaw-debuginfoUpgrade gtk3Upgrade gnome-online-accounts-debugsourceUpgrade vino-debugsourceUpgrade gtk3-devel-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-devel-debuginfoUpgrade gnome-calculatorUpgrade gnome-shell-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-online-accounts-develUpgrade gdm-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-sessionUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-shellUpgrade accountsservice-libsUpgrade gnome-software-debugsourceUpgrade gtk-update-icon-cacheUpgrade LibRaw-debugsourceUpgrade gnome-session-xsessionUpgrade mutter-debuginfoUpgrade accountsservice-develUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-online-accountsUpgrade mutter-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-session-debuginfoUpgrade gtk3-develUpgrade mutter-develUpgrade gnome-software-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-control-centerUpgrade webkit2gtk3-jsc-develUpgrade LibRawUpgrade vinoUpgrade mutterUpgrade webkit2gtk3-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-develUpgrade gdm-debugsourceUpgrade gnome-shell-debugsourceUpgrade vino-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade LibRaw-develUpgrade accountsservice-debugsourceUpgrade gdmUpgrade accountsservice-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-softwareUpgrade gnome-control-center-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-develUpgrade gnome-autoar | Mar 12, 2024 | Mar 17, 2021 |
| Suse | — | Upgrade typelib-1_0-gnomeautoar-0_1Upgrade libgnome-autoar-gtk-0-0Upgrade libgnome-autoar-0-0Upgrade typelib-1_0-gnomeautoargtk-0_1Upgrade gnome-autoar-devel | Oct 26, 2022 | Mar 17, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-gtk-0-0Upgrade libgnome-autoar-0-0 | May 7, 2021 | Mar 17, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub