CVE-2022-37290 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
mitre	CNA	---				---
CVE	ADP	---				---
CISA-ADP	ADP	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 6%

Vendor	Product	Version
gnome	nautilus	42.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

nautilus

bullseye	unimportant
bookworm	43.2-1 fixed
sid	47.0-2 fixed
trixie	47.0-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

caja

noble	needs-triage
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	needs-triage
focal	needs-triage
bionic	needs-triage
xenial	needs-triage
trusty	dne

nautilus

noble	Fixed 1:44~alpha-0ubuntu1 released
mantic	Fixed 1:44~alpha-0ubuntu1 released
lunar	Fixed 1:44~alpha-0ubuntu1 released
kinetic	Fixed 1:43.0-1ubuntu2.1 released
jammy	Fixed 1:42.2-0ubuntu2.1 released
focal	Fixed 1:3.36.3-0ubuntu1.20.04.2 released
bionic	Fixed 1:3.26.4-0~ubuntu18.04.6 released
xenial	not-affected
trusty	ignored

nemo

noble	needs-triage
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	needs-triage
focal	needs-triage
bionic	needs-triage
xenial	needs-triage
trusty	ignored

Known Exploits!

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376

https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001

https://gitlab.gnome.org/GNOME/nautilus/-/tree/master

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/

https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376

https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001

https://gitlab.gnome.org/GNOME/nautilus/-/tree/master

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/