DEBIAN-CVE-2019-11460
Record from OSV · Published April 22, 2019
An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| gnome-desktop3 | Debian:11 | 3.30.2.1-2 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | gnome-desktop3 | 0 |
Timeline
- Apr 22, 2019 CVE Published
- Aug 29, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2019-11460
vulnetix vdb fixes DEBIAN-CVE-2019-11460Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2019-11460/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart