An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised
    thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to
    push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to
    escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the
    TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063. (CVE-2019-11461)

According to the versions of the nautilus packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised     thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to     push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to     escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the     TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063. (CVE-2019-11461)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for flatpak fixes the following issues :

Security issues fixed :

  - CVE-2019-8308: Fixed a potential sandbox escape via     /proc (bsc#1125431).

  - CVE-2019-11460: Fixed a compromised thumbnailer may     escape the bubblewrap sandbox used to confine     thumbnailers by using the TIOCSTI ioctl (bsc#1133043).

  - CVE-2019-11461: Fixed a compromised thumbnailer may     escape the bubblewrap sandbox used to confine     thumbnailers by using the TIOCSTI ioctl (bsc#1133041).

This update was imported from the SUSE:SLE-15:Update update project.

The remote host is affected by the vulnerability described in GLSA-201908-27 (Nautilus: Security bypass)

    A vulnerability was discovered in Nautilus which allows an attacker to       escape the sandbox.
  Impact :

    A local attacker could possibly bypass sandbox protection.
  Workaround :

    There is no known workaround at this time.

This update for flatpak fixes the following issues :

Security issues fixed :

CVE-2019-8308: Fixed a potential sandbox escape via /proc (bsc#1125431).

CVE-2019-11460: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl (bsc#1133043).

CVE-2019-11461: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl (bsc#1133041).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
405686	Alpine: multiple nautilus packages: security update to 3.32.1	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405686	Alpine: multiple nautilus packages: security update to 3.32.1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
405685	Alpine: multiple nautilus packages: security update to 3.32.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405685	Alpine: multiple nautilus packages: security update to 3.32.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400494	Alpine: multiple nautilus packages: security update to 3.32.0-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400494	Alpine: multiple nautilus packages: security update to 3.32.0-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
159241	EulerOS 2.0 SP8 : nautilus (EulerOS-SA-2022-1356)	Nessus	Huawei Local Security Checks	high
128454	openSUSE Security Update : flatpak (openSUSE-2019-2038)	Nessus	SuSE Local Security Checks	critical
128442	GLSA-201908-27 : Nautilus: Security bypass	Nessus	Gentoo Local Security Checks	high
128048	SUSE SLED15 / SLES15 Security Update : flatpak (SUSE-SU-2019:2185-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2019-11461

high

Tenable Plugins

high

high

high

high

high

high

high

critical

high

critical