Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.5
CVSSv3

CVE-2022-37290

Published: 14/11/2022 Updated: 07/11/2023
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Gnome

Vulnerability Summary

GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnome nautilus 42.2

fedoraproject fedora 36

fedoraproject fedora 37

Vendor Advisories

Amazon Linux 2: ALAS2-2023-2331
GNOME Nautilus 422 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive (CVE-2022-37290) ...
Red Hat:
DescriptionThe MITRE CVE dictionary describes this issue as: GNOME Nautilus 422 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive ...

References

CWE-476https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376https://gitlab.gnome.org/GNOME/nautilus/-/tree/masterhttps://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/https://nvd.nist.govhttps://alas.aws.amazon.com/AL2/ALAS-2023-2331.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook