Bug 685850

Summary:	gnome-base/nautilus: sandbox escape (CVE-2019-11461)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor	CC:	gnome
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [ebuild]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2019-05-13 15:09:43 UTC

CVE-2019-11461 (https://nvd.nist.gov/vuln/detail/CVE-2019-11461):
  An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32
  prior to 3.32.1. A compromised thumbnailer may escape the bubblewrap sandbox
  used to confine thumbnailers by using the TIOCSTI ioctl to push characters
  into the input buffer of the thumbnailer's controlling terminal, allowing an
  attacker to escape the sandbox if the thumbnailer has a controlling
  terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit
  systems, similar to CVE-2019-10063.

Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev

2019-05-13 15:11:28 UTC

*** Bug 685852 has been marked as a duplicate of this bug. ***

Comment 2 Thomas Deutschmann (RETIRED) gentoo-dev

2019-08-31 14:44:11 UTC


*** This bug has been marked as a duplicate of bug 692784 ***