PatchTheCVEnautilus vulnerabilities and fixes
Recent CVEs affecting nautilus, with upgrade or downgrade steps. 5 tracked.
nautilus has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-11-14. Highest priority: CVE-2017-14604 (score 54/100).
- CVE-2022-37290 MEDIUM 5.5 DOWNGRADE MITIGATE GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP arch
- CVE-2019-11461 HIGH 7.8 UPGRADE An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1
- CVE-2017-14604 MEDIUM 6.5 UPGRADE MITIGATE GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as d
- CVE-2017-12447 HIGH 7.8 DOWNGRADE DOWNGRADE GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attacker
- CVE-2002-0157 MEDIUM 4.6 DOWNGRADE Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautil
FAQ
How do I fix nautilus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nautilus being exploited right now?
None of the tracked nautilus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nautilus CVE should I patch first?
CVE-2017-14604 currently ranks highest (54/100): GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as d.