PT-2021-2227 · Gnome+8 · Gnome Autoar+8

Published 2021-02-05 · Updated 2022-05-20 · CVE-2020-36241

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GNOME gnome-autoar versions up to 0.2.4

Description The issue is related to a function in the autoar-extractor.c file of the gnome-autoar library, which is used by GNOME Shell, Nautilus, and other software. It lacks a check to see if a file's parent is a symlink to a directory outside of the intended extraction location, allowing Directory Traversal during extraction. This could potentially allow an attacker to reveal protected information.

Recommendations For GNOME gnome-autoar versions up to 0.2.4, consider disabling the autoar-extractor.c function until a patch is available to prevent Directory Traversal attacks. Restrict access to sensitive directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Path traversal

Weakness Enumeration

CWE-59

CWE-22

Related Identifiers

ALSA-2021:4381

ALT-PU-2021-1318

BDU:2021-01162

CESA-2021_4381

CVE-2020-36241

MGASA-2021-0111

OESA-2021-1108

OPENSUSE-SU-2021:0390-1

OPENSUSE-SU-2021_0390-1

OPENSUSE-SU-2024:10795-1

RHSA-2021:4381

RHSA-2021_4381

RLSA-2021:4381

SUSE-SU-2021:0664-1

SUSE-SU-2021:0687-1

SUSE-SU-2021_0687-1

USN-4733-1

USN-4733-2

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Gnome Autoar

References · 140

• 🔥 https://gitlab.gnome.org/GNOME/gnome-autoar/-/issues/7 · Exploit
• https://advisories.mageia.org/MGASA-2021-0111.html · Security Note
• https://ubuntu.com/security/CVE-2020-36241?_ga=2.156948475.113542731.1612758940-997510329.1585215282 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4733-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01162 · Security Note
• https://ubuntu.com/security/notices/USN-4733-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0390-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1108 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0111 · Vendor Advisory
• https://gitlab.gnome.org/GNOME/gnome-autoar/-/commit/adb067e645732fdbe7103516e506d09eb6a54429 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:4381 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0664-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202105-10 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN5TVQ7OHZEGY6AGFLAZWCVCI53RYNHQ · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0687-1 · Vendor Advisory