Medium severity5.5NVD Advisory· Published Nov 14, 2022· Updated Jun 17, 2026
CVE-2022-37290
CVE-2022-37290
Description
GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13= 42.2+ 2 more
- (no CPE)range: = 42.2
- (no CPE)
- cpe:2.3:a:gnome:nautilus:42.2:*:*:*:*:*:*:*
- osv-coords8 versionspkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3pkg:rpm/opensuse/nautilus&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/nautilus&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4
< 3.34.3-150200.4.6.1+ 7 more
- (no CPE)range: < 3.34.3-150200.4.6.1
- (no CPE)range: < 3.34.3-150200.4.6.1
- (no CPE)range: < 3.34.3-150200.4.6.1
- (no CPE)range: < 3.20.3-23.15.1
- (no CPE)range: < 3.20.3-23.15.1
- (no CPE)range: < 3.20.3-23.15.1
- (no CPE)range: < 3.20.3-23.15.1
- (no CPE)range: < 41.5-150400.3.6.1
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001nvdPatch
- gitlab.gnome.org/GNOME/nautilus/-/issues/2376nvdExploitIssue TrackingPatchThird Party Advisory
- gitlab.gnome.org/GNOME/nautilus/-/tree/masternvdProduct
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/nvd
News mentions
0No linked articles in our index yet.