Lucene search
GoogleOSV:CVE-2021-28650HistoryMar 17, 2021 - 6:15 a.m.
CVE-2021-28650
2021-03-1706:15:14
Google
osv.dev
3
autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file’s parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gnome-autoar | eq | 0.2.1 | |
| gnome-autoar | eq | 0.2.0 | |
| gnome-autoar | eq | 0.2.2 | |
| gnome-autoar | eq | 0.3.0 | |
| gnome-autoar | eq | 0.2.3 | |
| gnome-autoar | eq | 0.1.0 | |
| gnome-autoar | eq | 0.2.4 |
Related
openvas
openvas
Fedora: Security Advisory for sysprof (FEDORA-2021-303f6623fa)
2021-03-20 00:00:00
Fedora: Security Advisory for gnome-mines (FEDORA-2021-303f6623fa)
2021-03-20 00:00:00
Fedora: Security Advisory for gnome-control-center (FEDORA-2021-303f6623fa)
2021-03-20 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: dconf-0.40.0-1.fc34
2021-03-20 00:21:33
[SECURITY] Fedora 34 Update: glib2-2.67.6-2.fc34
2021-03-20 00:21:34
[SECURITY] Fedora 34 Update: gnome-calendar-40~rc-1.fc34
2021-03-20 00:21:35
alpinelinux
alpinelinux
CVE-2021-28650
2021-03-17 06:15:14
CVE-2020-36241
2021-02-05 14:15:17
ubuntucve
ubuntucve
CVE-2021-28650
2021-03-17 00:00:00
CVE-2020-36241
2021-02-05 00:00:00
nvd
nvd
CVE-2021-28650
2021-03-17 06:15:14
CVE-2020-36241
2021-02-05 14:15:17
debiancve
debiancve
CVE-2021-28650
2021-03-17 06:15:14
CVE-2020-36241
2021-02-05 14:15:17
cvelist
cvelist
CVE-2021-28650
2021-03-17 05:51:33
CVE-2020-36241
2021-02-05 07:11:07
redhatcve
redhatcve
CVE-2021-28650
2021-03-17 13:46:38
CVE-2020-36241
2021-02-05 19:21:53
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : GNOME Autoar vulnerability (USN-4937-1)
2021-05-07 00:00:00
GLSA-202105-10 : GNOME Autoar: User-assisted execution of arbitrary code
2021-05-27 00:00:00
EulerOS 2.0 SP8 : gnome-autoar (EulerOS-SA-2021-1873)
2021-05-18 00:00:00
prion
prion
Directory traversal
2021-03-17 06:15:00
Directory traversal
2021-02-05 14:15:00
gentoo
gentoo
GNOME Autoar: User-assisted execution of arbitrary code
2021-05-26 00:00:00
cve
cve
CVE-2021-28650
2021-03-17 06:15:14
CVE-2020-36241
2021-02-05 14:15:17
osv
osv
gnome-autoar vulnerability
2021-05-06 11:15:45
CVE-2020-36241
2021-02-05 14:15:17
gnome-autoar vulnerability
2021-02-11 12:46:24
mageia
mageia
Updated gnome-autoar packages fix security vulnerability
2021-03-04 19:53:32
Updated gnome-autoar packages fix a security vulnerability
2021-06-23 20:11:28
suse
suse
Security update for gnome-autoar (moderate)
2021-03-06 00:00:00
ubuntu
ubuntu
GNOME Autoar vulnerability
2021-05-06 00:00:00
GNOME Autoar vulnerability
2021-02-11 00:00:00
veracode
veracode
Directory Traversal
2021-04-22 09:15:20
Directory Traversal
2021-04-22 06:29:07
almalinux
almalinux
Moderate: GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
oraclelinux
oraclelinux
GNOME security, bug fix, and enhancement update
2021-11-16 00:00:00
redhat
redhat
rocky
rocky
GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
ibm
ibm