CVE-2022-37290
CVE-2022-37290
This page contains facts from public vulnerability sources. Check the original advisory before updating.
GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
CVSS 5.5 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
nautilus Debian:12
- Affected ranges
- ECOSYSTEM: < 43.2-1
Update to 43.2-1
nautilus Debian:13
- Affected ranges
- ECOSYSTEM: < 43.2-1
Update to 43.2-1
nautilus Debian:14
- Affected ranges
- ECOSYSTEM: < 43.2-1
Update to 43.2-1
caja Ubuntu:16.04:LTS
- Versions
- 1.10.4-1
- 1.12.2-1
- 1.12.3-1
- 1.12.4-1
- 1.12.4-2
- 1.12.6-1
- 1.12.7-1
- 1.12.7-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nemo Ubuntu:16.04:LTS
- Versions
- 2.6.7-1
- 2.8.6-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nautilus Ubuntu:18.04:LTS
- Versions
- 1:3.26.0-0ubuntu1
- 1:3.26.2-0ubuntu1
- 1:3.26.2-0ubuntu3.1
- 1:3.26.3-0ubuntu1
- 1:3.26.3-0ubuntu2
- 1:3.26.3-0ubuntu3
- 1:3.26.3-0ubuntu4
- 1:3.26.4-0~ubuntu18.04.1
- 1:3.26.4-0~ubuntu18.04.2
- 1:3.26.4-0~ubuntu18.04.3
- 1:3.26.4-0~ubuntu18.04.4
- 1:3.26.4-0~ubuntu18.04.5
- Affected ranges
- ECOSYSTEM: < 1:3.26.4-0~ubuntu18.04.6
Update to 1:3.26.4-0~ubuntu18.04.6
caja Ubuntu:18.04:LTS
- Versions
- 1.18.4-0ubuntu2
- 1.18.4-2
- 1.18.5-1
- 1.18.5-2
- 1.19.3-0ubuntu1
- 1.20.0-0ubuntu1
- 1.20.0-2
- 1.20.1-0ubuntu1
- 1.20.1-1
- 1.20.2-0ubuntu1
- 1.20.2-1ubuntu1
- 1.20.2-3ubuntu1
- 1.20.2-4ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nemo Ubuntu:18.04:LTS
- Versions
- 3.4.7-1ubuntu1
- 3.6.5-1
- 3.6.5-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nautilus Ubuntu:20.04:LTS
- Versions
- 1:3.34.1-1ubuntu1
- 1:3.35.90-1ubuntu2
- 1:3.35.92-1ubuntu1
- 1:3.36.0-1ubuntu1
- 1:3.36.1-1ubuntu1
- 1:3.36.1.1-1ubuntu1
- 1:3.36.1.1-1ubuntu2
- 1:3.36.2-0ubuntu1
- 1:3.36.3-0ubuntu1
- 1:3.36.3-0ubuntu1.20.04.1
- Affected ranges
- ECOSYSTEM: < 1:3.36.3-0ubuntu1.20.04.2
Update to 1:3.36.3-0ubuntu1.20.04.2
caja Ubuntu:20.04:LTS
- Versions
- 1.22.2-0ubuntu1
- 1.22.3-1
- 1.24.0-0ubuntu1
- 1.24.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nemo Ubuntu:20.04:LTS
- Versions
- 4.0.6-1
- 4.2.3-2
- 4.4.2-2
- 4.4.2-2ubuntu1
- 4.4.2-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
caja Ubuntu:22.04:LTS
- Versions
- 1.26.0-0ubuntu1
- 1.26.0-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nautilus Ubuntu:22.04:LTS
- Versions
- 1:40.2-1ubuntu1
- 1:41.1-1ubuntu1
- 1:41.2-1ubuntu1
- 1:42~beta-1ubuntu1
- 1:42~rc-1ubuntu1
- 1:42.0-1ubuntu2
- 1:42.1.1-0ubuntu1
- 1:42.2-0ubuntu1
- 1:42.2-0ubuntu2
- Affected ranges
- ECOSYSTEM: < 1:42.2-0ubuntu2.1
Update to 1:42.2-0ubuntu2.1
nemo Ubuntu:22.04:LTS
- Versions
- 4.8.6-2
- 5.0.5-1
- 5.2.2-1
- 5.2.4-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
caja Ubuntu:24.04:LTS
- Versions
- 1.26.1-1
- 1.26.3-1
- 1.26.3-1build1
- 1.26.3-1build2
- 1.26.3-1build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nemo Ubuntu:24.04:LTS
- Versions
- 5.8.4-1
- 5.8.5-2
- 6.0.2-1ubuntu1
- 6.0.2-1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
caja Ubuntu:25.10
- Versions
- 1.26.3-1build3
- 1.26.4-1
- 1.26.4-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nemo Ubuntu:25.10
- Versions
- 6.4.5-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
caja Ubuntu:26.10
- Versions
- 1.26.4-2
- 1.26.4-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nemo Ubuntu:26.10
- Versions
- 6.4.5-1build1
- 6.6.4-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
caja Ubuntu:26.04:LTS
- Versions
- 1.26.4-1build1
- 1.26.4-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nemo Ubuntu:26.04:LTS
- Versions
- 6.4.5-1
- 6.4.5-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://gitlab.gnome.org/GNOME/nautilus/-/tree/master
- https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376
- https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/
- https://nvd.nist.gov/vuln/detail/CVE-2022-37290