An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gjs-develUpgrade gnome-menus-develUpgrade mozjs52-develUpgrade clutter-develUpgrade mozjs60-develUpgrade clutter-docUpgrade gnome-tweaksUpgrade accountsservice-develUpgrade mozjs52Upgrade vala-develUpgrade valaUpgrade baobabUpgrade mozjs60Upgrade clutterUpgrade gnome-menus | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade clutter-debuginfoUpgrade mozjs52-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade vinagre-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-menus-debugsourceUpgrade gvfs-client-debuginfoUpgrade gtk3Upgrade mozjs52-debugsourceUpgrade gvfs-afpUpgrade gvfs-debugsourceUpgrade gtk3-tests-debuginfoUpgrade mozjs60Upgrade mozjs52-devel-debuginfoUpgrade accountsserviceUpgrade gtk-update-icon-cacheUpgrade gvfs-goa-debuginfoUpgrade accountsservice-libsUpgrade gnome-settings-daemonUpgrade accountsservice-debugsourceUpgrade nautilus-debugsourceUpgrade clutter-tests-debuginfoUpgrade gnome-control-center-filesystemUpgrade mutter-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-boxesUpgrade evince-nautilus-debuginfoUpgrade accountsservice-debuginfoUpgrade mutter-debugsourceUpgrade gvfs-clientUpgrade gnome-remote-desktop-debugsourceUpgrade baobab-debugsourceUpgrade gjsUpgrade baobabUpgrade libvncserverUpgrade gvfs-gphoto2Upgrade gdm-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-menus-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade evince-libs-debuginfoUpgrade gjs-debuginfoUpgrade gnome-terminal-debugsourceUpgrade evince-debuginfoUpgrade clutterUpgrade gnome-settings-daemon-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gnome-shell-debuginfoUpgrade mutter-tests-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-session-wayland-sessionUpgrade baobab-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-control-center-debugsourceUpgrade libxslt-develUpgrade gtk3-debugsourceUpgrade evince-libsUpgrade gnome-session-debugsourceUpgrade evinceUpgrade clutter-debugsourceUpgrade libxslt-debuginfoUpgrade LibRaw-debuginfoUpgrade gdmUpgrade gvfs-afc-debuginfoUpgrade mozjs60-debugsourceUpgrade mozjs60-debuginfoUpgrade gjs-debugsourceUpgrade libvncserver-debuginfoUpgrade gnome-sessionUpgrade libxslt-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gnome-tweaksUpgrade gnome-shellUpgrade gvfs-archiveUpgrade gnome-remote-desktopUpgrade gvfs-mtpUpgrade gdm-debugsourceUpgrade gvfs-afp-debuginfoUpgrade vinagreUpgrade accountsservice-libs-debuginfoUpgrade mozjs52Upgrade nautilusUpgrade gnome-software-editor-debuginfoUpgrade libvncserver-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gnome-session-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-control-centerUpgrade vinagre-debuginfoUpgrade gvfs-smbUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-fuseUpgrade gnome-software-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-menusUpgrade evince-nautilusUpgrade gvfs-develUpgrade gvfsUpgrade nautilus-extensionsUpgrade gvfs-afcUpgrade gtk3-immodules-debuginfoUpgrade evince-browser-pluginUpgrade gnome-software-editorUpgrade gtk3-devel-debuginfoUpgrade gnome-online-accountsUpgrade gnome-terminalUpgrade gnome-softwareUpgrade gvfs-debuginfoUpgrade libxsltUpgrade nautilus-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-terminal-nautilusUpgrade LibRawUpgrade LibRaw-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-develUpgrade evince-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-shell-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade appstream-dataUpgrade mutterUpgrade gvfs-goa | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-fuseUpgrade gvfs-mtpUpgrade gvfs-goaUpgrade gvfs-gphoto2Upgrade gvfs-smbUpgrade gvfs-afpUpgrade gvfs-archiveUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-afcUpgrade gvfs-client | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-archiveUpgrade gvfs-fuseUpgrade gvfs-gphoto2Upgrade gvfs-smbUpgrade gvfsUpgrade gvfs-develUpgrade gvfs-goaUpgrade gvfs-clientUpgrade gvfs-afpUpgrade gvfs-afcUpgrade gvfs-mtp | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade gnome-session-xsessionUpgrade clutterUpgrade gnome-session-wayland-sessionUpgrade mozjs60Upgrade gnome-terminalUpgrade accountsserviceUpgrade gnome-menus-develUpgrade gtk3Upgrade libvncserverUpgrade gnome-control-center-filesystemUpgrade mutter-develUpgrade gnome-boxesUpgrade gsettings-desktop-schemas-develUpgrade clutter-develUpgrade accountsservice-libsUpgrade evinceUpgrade gnome-sessionUpgrade gtk-update-icon-cacheUpgrade gtk3-immodule-ximUpgrade gnome-settings-daemonUpgrade mozjs60-develUpgrade gnome-menusUpgrade mutterUpgrade gjsUpgrade gnome-shellUpgrade gnome-tweaksUpgrade gjs-develUpgrade mozjs52Upgrade vinagreUpgrade gnome-online-accounts-develUpgrade gdmUpgrade evince-libsUpgrade gnome-online-accountsUpgrade accountsservice-develUpgrade gtk3-develUpgrade valaUpgrade LibRaw-develUpgrade libxsltUpgrade nautilus-develUpgrade vala-develUpgrade libxslt-develUpgrade gnome-software-editorUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade gnome-softwareUpgrade nautilus-extensionsUpgrade LibRawUpgrade mozjs52-develUpgrade gnome-terminal-nautilusUpgrade gsettings-desktop-schemasUpgrade clutter-docUpgrade libvncserver-develUpgrade nautilusUpgrade gnome-remote-desktopUpgrade gnome-control-centerUpgrade appstream-data | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gdmUpgrade accountsservice-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade libvncserverUpgrade gvfs-mtp-debuginfoUpgrade gvfs-gphoto2Upgrade gjsUpgrade gtk3-immodule-ximUpgrade gjs-debugsourceUpgrade mozjs52-develUpgrade gnome-settings-daemon-debuginfoUpgrade baobab-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gjs-tests-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gjs-develUpgrade clutter-debugsourceUpgrade evince-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-control-centerUpgrade gtk3-tests-debuginfoUpgrade gnome-software-editorUpgrade nautilus-debugsourceUpgrade nautilus-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-shell-debugsourceUpgrade appstream-dataUpgrade gnome-menus-debuginfoUpgrade mozjs52-debugsourceUpgrade mutterUpgrade libvncserver-debuginfoUpgrade mozjs60-debuginfoUpgrade gvfs-goa-debuginfoUpgrade libxslt-debuginfoUpgrade evince-libsUpgrade clutter-develUpgrade gnome-session-debuginfoUpgrade accountsservice-debuginfoUpgrade gjs-debuginfoUpgrade clutter-tests-debuginfoUpgrade gvfs-goaUpgrade vala-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-software-debuginfoUpgrade gtk3-debuginfoUpgrade evinceUpgrade evince-debugsourceUpgrade libxslt-develUpgrade libvncserver-develUpgrade gnome-terminal-debugsourceUpgrade mutter-debugsourceUpgrade gnome-menus-develUpgrade gdm-debugsourceUpgrade libxslt-debugsourceUpgrade nautilus-develUpgrade gvfs-smbUpgrade mozjs52-debuginfoUpgrade gnome-boxesUpgrade gnome-boxes-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-tweaksUpgrade LibRawUpgrade gvfs-mtpUpgrade LibRaw-samples-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gsettings-desktop-schemasUpgrade nautilusUpgrade mutter-develUpgrade gnome-remote-desktopUpgrade gnome-settings-daemon-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade mozjs60-develUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-client-debuginfoUpgrade LibRaw-develUpgrade gnome-remote-desktop-debugsourceUpgrade vala-debuginfoUpgrade accountsserviceUpgrade gvfs-debuginfoUpgrade gvfsUpgrade gvfs-afp-debuginfoUpgrade gnome-software-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gvfs-afcUpgrade gnome-settings-daemonUpgrade libxsltUpgrade gnome-online-accounts-debugsourceUpgrade clutterUpgrade baobab-debuginfoUpgrade gnome-softwareUpgrade baobabUpgrade gnome-online-accounts-develUpgrade gnome-menusUpgrade gnome-online-accountsUpgrade gnome-software-editor-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-shellUpgrade vinagreUpgrade vala-develUpgrade gnome-terminal-debuginfoUpgrade gdm-debuginfoUpgrade gnome-session-wayland-sessionUpgrade vinagre-debugsourceUpgrade gnome-session-xsessionUpgrade gtk3-immodules-debuginfoUpgrade clutter-docUpgrade gtk3-develUpgrade gnome-terminalUpgrade accountsservice-libs-debuginfoUpgrade gtk-update-icon-cacheUpgrade gvfs-develUpgrade gnome-boxes-debuginfoUpgrade libvncserver-debugsourceUpgrade accountsservice-libsUpgrade evince-nautilus-debuginfoUpgrade mutter-debuginfoUpgrade mozjs60Upgrade mozjs60-debugsourceUpgrade evince-browser-pluginUpgrade gtk3-debugsourceNo solution existsUpgrade valadoc-debuginfoUpgrade gnome-control-center-filesystemUpgrade gvfs-fuseUpgrade gvfs-archiveUpgrade gvfs-afc-debuginfoUpgrade gvfs-afpUpgrade gnome-control-center-debuginfoUpgrade nautilus-extensionsUpgrade gnome-terminal-nautilusUpgrade accountsservice-develUpgrade gnome-menus-debugsourceUpgrade LibRaw-debugsourceUpgrade gvfs-clientUpgrade LibRaw-debuginfoUpgrade evince-libs-debuginfoUpgrade clutter-debuginfoUpgrade gnome-sessionUpgrade gtk3Upgrade vinagre-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade evince-nautilusUpgrade gnome-terminal-nautilus-debuginfoUpgrade valaUpgrade mozjs52Upgrade mutter-tests-debuginfoUpgrade gnome-session-debugsourceUpgrade gtk3-devel-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade clutterUpgrade gnome-menus-develUpgrade mozjs60-debugsourceUpgrade mozjs52-debugsourceUpgrade mozjs52-develUpgrade mozjs60Upgrade clutter-develUpgrade clutter-debugsourceUpgrade gnome-menus-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-menusUpgrade baobabUpgrade baobab-debuginfoUpgrade clutter-docUpgrade mozjs60-debuginfoUpgrade baobab-debugsourceUpgrade mozjs52Upgrade gnome-menus-debuginfoUpgrade mozjs60-develUpgrade clutter-debuginfo | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-develUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-32bitUpgrade gvfs-backend-afcUpgrade gvfs-backend-sambaUpgrade gvfs-langUpgrade gvfs-backends | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub