PT-2019-12322 · Gnome+2 · Gnome Nautilus+2

Published 2019-04-22 · Updated 2020-08-24 · CVE-2019-11461

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNOME Nautilus versions 3.30 through 3.30.5 GNOME Nautilus versions 3.32 through 3.32.0

Description An issue was discovered in GNOME Nautilus. A compromised thumbnailer may escape the bubblewrap sandbox by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems.

Recommendations For GNOME Nautilus versions 3.30 through 3.30.5, update to version 3.30.6 or later. For GNOME Nautilus versions 3.32 through 3.32.0, update to version 3.32.1 or later.

Fix

Related Identifiers

ALT-PU-2019-1768

CVE-2019-11461

OPENSUSE-SU-2019:2038-1

OPENSUSE-SU-2019_2038-1

OPENSUSE-SU-2024:11076-1

SUSE-SU-2019:2185-1

Affected Products

Alt Linux

Gnome Nautilus

Suse

References · 25

• https://security.gentoo.org/glsa/201908-27 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11461 · Security Note
• https://bdu.fstec.ru/vul/2019-04784 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-11461 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11461 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:2185-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2038-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-11461 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-11461 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2019-1768 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00088.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2019-11460.html · Note
• https://packages.altlinux.org/ru/vuln/CVE-2019-11461 · Note
• https://bugzilla.suse.com/1133043 · Note
• https://gitlab.gnome.org/GNOME/nautilus/issues/987 · Note