ALT-PU-2022-2647-1
Closed vulnerabilities
Published: 2022-11-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
Severity: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
- https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376
- https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001
- https://gitlab.gnome.org/GNOME/nautilus/-/tree/master
- FEDORA-2023-dbe1157188
- FEDORA-2023-f81ad89b81
- https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376
- FEDORA-2023-f81ad89b81
- FEDORA-2023-dbe1157188
- https://gitlab.gnome.org/GNOME/nautilus/-/tree/master
- https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001