CVE Vulnerability

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376 Exploit Issue Tracking
https://gitlab.gnome.org/GNOME/nautilus/-/tree/master Third Party Advisory
https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001 Patch Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/
Configurations

Configuration 1

cpe:2.3:a:gnome:nautilus:42.2:*:*:*:*:*:*:*
Information

Published : 2022-11-14 08:15

Updated : 2023-01-26 09:15

NVD link : CVE-2022-37290

Mitre link : CVE-2022-37290

Products Affected
No products.
CWE
CWE-476