Sandbox Escape Vulnerability in GNOME Nautilus by GNOME

CVE-2019-11461

What is CVE-2019-11461?

A potential vulnerability was identified in GNOME Nautilus that allows a malicious thumbnailer to escape its contained environment. The issue arises from improper filtering of the TIOCSTI ioctl on 64-bit systems, enabling attackers to push characters into the input buffer of the thumbnailer's controlling terminal. This opens a pathway for unauthorized access and command execution outside the intended sandbox, particularly when the thumbnailer has a controlling terminal. Affected versions include Nautilus 3.30 prior to 3.30.6 and Nautilus 3.32 prior to 3.32.1.

References