Lucene search
UbuntuUSN-6808-1HistoryJun 05, 2024 - 12:00 a.m.
Atril vulnerability
2024-06-0500:00:00
ubuntu.com
11
atril
ubuntu
path traversal
CVSS3
8.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
AI Score
8.1
Confidence
High
EPSS
0.007
Percentile
80.3%
Releases
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- atril - Official Document Viewer of the MATE Desktop Environment
Details
It was discovered that Atril was vulnerable to a path traversal attack.
An attacker could possibly use this vulnerability to create arbitrary
files on the host filesystem with user privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | atril | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | atril-common | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | atril-dbgsym | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | gir1.2-atrildocument-1.5.0 | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | gir1.2-atrilview-1.5.0 | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libatrildocument-dev | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libatrildocument3 | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libatrildocument3-dbgsym | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libatrilview-dev | < 1.26.0-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libatrilview3 | < 1.26.0-2ubuntu0.1 | UNKNOWN |
References
Related
osv
osv
atril - security update
2024-05-12 00:00:00
atril - security update
2024-06-14 00:00:00
CVE-2023-52076
2024-01-25 16:15:07
openvas
openvas
Ubuntu: Security Advisory (USN-6808-1)
2024-06-06 00:00:00
Mageia: Security Advisory (MGASA-2024-0224)
2024-06-17 00:00:00
Debian: Security Advisory (DSA-5688-1)
2024-05-13 00:00:00
veracode
veracode
Path Traversal
2024-02-03 03:01:39
mageia
mageia
Updated atril packages fix security vulnerability
2024-06-16 02:07:50
cve
cve
CVE-2023-52076
2024-01-25 16:15:07
redos
redos
ROS-20240412-03
2024-04-12 00:00:00
cvelist
cvelist
nessus
nessus
Amazon Linux 2 : atril (ALASMATE-DESKTOP1.X-2024-006)
2024-02-20 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : Atril vulnerability (USN-6808-1)
2024-06-05 00:00:00
Debian dsa-5688 : atril - security update
2024-05-12 00:00:00
debiancve
debiancve
CVE-2023-52076
2024-01-25 16:15:07
ubuntucve
ubuntucve
CVE-2023-52076
2024-01-25 00:00:00
prion
prion
Path traversal
2024-01-25 16:15:00
nvd
nvd
CVE-2023-52076
2024-01-25 16:15:07
githubexploit
githubexploit
Exploit for CVE-2023-44451
2024-01-17 05:50:38
debian
debian
[SECURITY] [DSA 5688-1] atril security update
2024-05-12 13:21:12
CVSS3
8.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
AI Score
8.1
Confidence
High
EPSS
0.007
Percentile
80.3%
Related for USN-6808-1