Lucene search

K
redhatcveRedhat.comRH:CVE-2022-37290
HistoryDec 01, 2022 - 11:26 a.m.

CVE-2022-37290

2022-12-0111:26:17
redhat.com
access.redhat.com
8
nautilus package
null pointer dereference
crash
zip archive

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

27.2%

A NULL pointer dereference was found in the Nautilus package. This issue may lead to a crash via pasted ZIP archive

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

27.2%