Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.

Published

2022-11-14T08:15:09.387

Last Modified

2025-05-01T14:15:26.527

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses

Type: Primary
CWE-476
Type: Secondary
CWE-476

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	gnome	nautilus	42.2	Yes
Operating System	fedoraproject	fedora	36	Yes
Operating System	fedoraproject	fedora	37	Yes

References

https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376 Exploit, Issue Tracking, Patch, Third Party Advisory ([email protected])
https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001 Patch ([email protected])
https://gitlab.gnome.org/GNOME/nautilus/-/tree/master Product ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/ ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/ ([email protected])
https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376 Exploit, Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://gitlab.gnome.org/GNOME/nautilus/-/tree/master Product (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/ (af854a3a-2127-422b-91ae-364da2661108)