漏洞信息详情
GNOME file-roller 路径遍历漏洞
漏洞简介
GNOME file-roller是一款使用在GNOME桌面中的压缩文件管理器。
GNOME file-roller 3.29.91之前版本中存在路径遍历漏洞。攻击者可利用该漏洞覆盖文件。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://gitlab.gnome.org/GNOME/file-roller/commit/e8fb3e24dae711e4fb0d6777e0016cdda8787bc1
参考网址
来源:MISC
链接:https://bugzilla.gnome.org/show_bug.cgi?id=794337
来源:UBUNTU
链接:https://usn.ubuntu.com/4139-1/
来源:DEBIAN
链接:https://www.debian.org/security/2019/dsa-4537
来源:MISC
链接:https://bugzilla.redhat.com/show_bug.cgi?id=1767594
来源:MISC
链接:https://gitlab.gnome.org/GNOME/file-roller/commit/e8fb3e24dae711e4fb0d6777e0016cdda8787bc1
来源:gitlab.gnome.org
链接:https://gitlab.gnome.org/GNOME/file-roller/commit/57268e51e59b61c9e3125eb0f65551c7084297e2
来源:BUGTRAQ
链接:https://seclists.org/bugtraq/2019/Sep/57
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2019/09/msg00032.html
来源:www.debian.org
链接:https://www.debian.org/security/2019/dsa-4537
来源:lists.debian.org
链接:https://lists.debian.org/debian-lts-announce/2019/09/msg00032.html
来源:usn.ubuntu.com
链接:https://usn.ubuntu.com/4139-1/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/154609/Ubuntu-Security-Notice-USN-4139-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.1425/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159841/Red-Hat-Security-Advisory-2020-4820-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3626/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3846/
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/GNOME-File-roller-directory-traversal-via-TAR-Archive-30409
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-16680
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/154688/Debian-Security-Advisory-4537-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3661/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3673/
受影响实体
暂无
补丁
- GNOME file-roller 路径遍历漏洞的修复措施<!--2019-9-21-->
还没有评论,来说两句吧...