CVE-2021-28650

🗓️ 17 Mar 2021 00:00:00Reported by ubuntu.comType

GNOME gnome-autoar allows Directory Traversal via symlink in extractio

Reporter	Title	Published	Views	Family All 166
Fedora	[SECURITY] Fedora 34 Update: glib-networking-2.68~rc-1.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: sysprof-3.39.94-2.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: gtk4-4.1.2-1.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: gnome-shell-extension-background-logo-40.0~rc-1.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: mutter-40.0~rc-1.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: gnome-shell-40.0~rc-1.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: tracker3-miners-3.1.0~rc-1.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: evolution-3.39.3-1.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: gnome-disk-utility-40~rc-1.fc34	20 Mar 202100:21	–	fedora
Fedora	[SECURITY] Fedora 34 Update: gnote-40~rc-1.fc34	20 Mar 202100:21	–	fedora

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-4937-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-28650
launchpad	www.launchpad.net/bugs/cve/CVE-2021-28650
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-28650

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	gnome-autoar	0.2.3-1ubuntu0.3	UNKNOWN
ubuntu	20.04	noarch	gnome-autoar	0.2.3-2ubuntu0.3	UNKNOWN
ubuntu	20.10	noarch	gnome-autoar	0.2.4-2ubuntu0.3	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Mar 2021 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS22.1

CVSS35.5

EPSS0.001