An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-menusUpgrade mozjs52Upgrade mozjs60-develUpgrade baobabUpgrade gjs-develUpgrade vala-develUpgrade accountsservice-develUpgrade clutter-docUpgrade clutterUpgrade gnome-menus-develUpgrade clutter-develUpgrade mozjs52-develUpgrade valaUpgrade mozjs60Upgrade gnome-tweaks | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gnome-session-xsessionUpgrade gtk3-immodules-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-control-center-debugsourceUpgrade evince-libs-debuginfoUpgrade gvfs-smb-debuginfoUpgrade evinceUpgrade gnome-menus-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-menus-debuginfoUpgrade mozjs60Upgrade gnome-online-accounts-develUpgrade evince-debuginfoUpgrade gvfs-client-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gdm-debuginfoUpgrade accountsserviceUpgrade gnome-menusUpgrade libxsltUpgrade gnome-remote-desktop-debugsourceUpgrade mozjs52-debugsourceUpgrade mutter-debuginfoUpgrade nautilus-debugsourceUpgrade gvfs-afc-debuginfoUpgrade accountsservice-libsUpgrade gnome-session-debugsourceUpgrade gnome-boxesUpgrade clutterUpgrade clutter-tests-debuginfoUpgrade gvfs-archiveUpgrade libxslt-debuginfoUpgrade gvfs-smbUpgrade gjs-debuginfoUpgrade gnome-control-center-filesystemUpgrade accountsservice-debugsourceUpgrade gvfs-afp-debuginfoUpgrade mozjs52-debuginfoUpgrade baobab-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-settings-daemonUpgrade mutterUpgrade accountsservice-libs-debuginfoUpgrade gjsUpgrade gnome-terminalUpgrade gvfs-archive-debuginfoUpgrade LibRawUpgrade evince-browser-plugin-debuginfoUpgrade gdmUpgrade gnome-control-centerUpgrade vinagre-debugsourceUpgrade gjs-tests-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gvfs-clientUpgrade gvfs-gphoto2Upgrade gvfs-mtp-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gvfs-goa-debuginfoUpgrade LibRaw-debuginfoUpgrade mutter-tests-debuginfoUpgrade gjs-debugsourceUpgrade gnome-terminal-debugsourceUpgrade gtk-update-icon-cacheUpgrade gvfs-afpUpgrade gnome-terminal-debuginfoUpgrade gtk3Upgrade clutter-debuginfoUpgrade gtk3-debugsourceUpgrade mutter-debugsourceUpgrade gvfsUpgrade gnome-terminal-nautilus-debuginfoUpgrade appstream-dataUpgrade gnome-shellUpgrade gnome-remote-desktopUpgrade evince-libsUpgrade gvfs-gphoto2-debuginfoUpgrade libvncserverUpgrade gnome-terminal-nautilusUpgrade evince-browser-pluginUpgrade libvncserver-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gvfs-debuginfoUpgrade gsettings-desktop-schemasUpgrade LibRaw-debugsourceUpgrade libvncserver-debugsourceUpgrade gnome-tweaksUpgrade gnome-boxes-debuginfoUpgrade accountsservice-debuginfoUpgrade vinagreUpgrade gnome-software-editorUpgrade libxslt-develUpgrade libxslt-debugsourceUpgrade gvfs-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gvfs-goaUpgrade gtk3-tests-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-session-debuginfoUpgrade gvfs-afcUpgrade vinagre-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gnome-softwareUpgrade nautilus-extensionsUpgrade gvfs-fuseUpgrade evince-nautilusUpgrade nautilusUpgrade gvfs-mtpUpgrade evince-debugsourceUpgrade mozjs60-debugsourceUpgrade gvfs-develUpgrade clutter-debugsourceUpgrade gnome-shell-debugsourceUpgrade mozjs60-debuginfoUpgrade nautilus-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-develUpgrade gnome-online-accountsUpgrade gnome-software-debuginfoUpgrade baobabUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gdm-debugsourceUpgrade gnome-control-center-debuginfoUpgrade evince-nautilus-debuginfoUpgrade baobab-debuginfoUpgrade gnome-sessionUpgrade mozjs52Upgrade gnome-boxes-debugsource | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-develUpgrade gvfs-afcUpgrade gvfs-clientUpgrade gvfs-goaUpgrade gvfs-afpUpgrade gvfs-mtpUpgrade gvfs-smbUpgrade gvfs-gphoto2Upgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-archive | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-gphoto2Upgrade gvfs-goaUpgrade gvfs-mtpUpgrade gvfs-smbUpgrade gvfs-develUpgrade gvfs-fuseUpgrade gvfs-afcUpgrade gvfs-clientUpgrade gvfs-archiveUpgrade gvfs-afpUpgrade gvfs | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade mozjs52-develUpgrade accountsservice-develUpgrade LibRawUpgrade nautilus-develUpgrade evince-libsUpgrade gnome-shellUpgrade mutterUpgrade vinagreUpgrade appstream-dataUpgrade gnome-softwareUpgrade nautilusUpgrade gnome-control-centerUpgrade gnome-terminal-nautilusUpgrade gnome-boxesUpgrade clutter-docUpgrade gdmUpgrade evinceUpgrade clutter-develUpgrade LibRaw-develUpgrade gjs-develUpgrade gnome-menus-develUpgrade mozjs52Upgrade gnome-software-editorUpgrade libxslt-develUpgrade libvncserver-develUpgrade mutter-develUpgrade evince-browser-pluginUpgrade clutterUpgrade libvncserverUpgrade libxsltUpgrade gtk3-develUpgrade gsettings-desktop-schemasUpgrade gnome-tweaksUpgrade valaUpgrade gnome-online-accountsUpgrade accountsserviceUpgrade gnome-remote-desktopUpgrade gnome-menusUpgrade vala-develUpgrade gnome-control-center-filesystemUpgrade gnome-terminalUpgrade gsettings-desktop-schemas-develUpgrade gnome-sessionUpgrade gjsUpgrade nautilus-extensionsUpgrade gnome-settings-daemonUpgrade gnome-session-xsessionUpgrade gnome-online-accounts-develUpgrade evince-nautilusUpgrade accountsservice-libsUpgrade gtk-update-icon-cacheUpgrade mozjs60Upgrade gtk3-immodule-ximUpgrade gtk3Upgrade mozjs60-develUpgrade gnome-session-wayland-session | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-control-center-debuginfoUpgrade mozjs52Upgrade mozjs52-debuginfoUpgrade nautilus-extensionsNo solution existsUpgrade libvncserver-debugsourceUpgrade accountsservice-develUpgrade evince-browser-pluginUpgrade gvfs-gphoto2Upgrade gvfs-archive-debuginfoUpgrade mozjs60-debugsourceUpgrade gvfs-debuginfoUpgrade gdm-debugsourceUpgrade gvfs-develUpgrade LibRawUpgrade clutter-docUpgrade gnome-remote-desktop-debugsourceUpgrade vala-debuginfoUpgrade vinagre-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gdm-debuginfoUpgrade gvfs-afp-debuginfoUpgrade nautilusUpgrade gnome-session-debugsourceUpgrade gtk3-develUpgrade vinagreUpgrade gnome-online-accounts-develUpgrade mutter-debuginfoUpgrade gnome-terminal-debuginfoUpgrade evince-debugsourceUpgrade evince-nautilus-debuginfoUpgrade nautilus-debuginfoUpgrade baobab-debuginfoUpgrade gtk3-devel-debuginfoUpgrade vala-develUpgrade nautilus-develUpgrade gvfs-fuse-debuginfoUpgrade mozjs60Upgrade gnome-shellUpgrade gvfs-clientUpgrade gnome-session-wayland-sessionUpgrade accountsservice-libs-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-online-accountsUpgrade clutterUpgrade gnome-control-center-filesystemUpgrade mutter-develUpgrade gnome-terminal-nautilus-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-menusUpgrade gtk3-immodules-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade libxsltUpgrade gvfs-fuseUpgrade accountsservice-libsUpgrade gnome-menus-debugsourceUpgrade baobab-debugsourceUpgrade accountsserviceUpgrade gvfs-mtpUpgrade gtk3Upgrade vinagre-debuginfoUpgrade evince-nautilusUpgrade valaUpgrade baobabUpgrade gvfs-archiveUpgrade evince-libs-debuginfoUpgrade gnome-sessionUpgrade gnome-settings-daemonUpgrade valadoc-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gvfsUpgrade gnome-terminalUpgrade gnome-shell-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-softwareUpgrade gdmUpgrade gnome-tweaksUpgrade gnome-session-xsessionUpgrade mozjs52-debugsourceUpgrade gsettings-desktop-schemasUpgrade gjs-develUpgrade gvfs-smb-debuginfoUpgrade gtk3-immodule-ximUpgrade mozjs52-develUpgrade gvfs-goa-debuginfoUpgrade libxslt-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-remote-desktopUpgrade gvfs-afpUpgrade gtk-update-icon-cache-debuginfoUpgrade clutter-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-terminal-debugsourceUpgrade gnome-session-debuginfoUpgrade gvfs-debugsourceUpgrade libvncserverUpgrade gvfs-gphoto2-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gjs-tests-debuginfoUpgrade mutter-tests-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade LibRaw-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gjs-debuginfoUpgrade clutter-debugsourceUpgrade evince-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gnome-software-editorUpgrade gvfs-goaUpgrade accountsservice-debuginfoUpgrade libxslt-debuginfoUpgrade gvfs-client-debuginfoUpgrade libvncserver-develUpgrade nautilus-debugsourceUpgrade evinceUpgrade mozjs60-debuginfoUpgrade evince-libsUpgrade gnome-remote-desktop-debuginfoUpgrade libvncserver-debuginfoUpgrade gvfs-afcUpgrade gjs-debugsourceUpgrade vala-debugsourceUpgrade gnome-boxes-debuginfoUpgrade accountsservice-debugsourceUpgrade mutterUpgrade libxslt-develUpgrade gnome-shell-debugsourceUpgrade gvfs-smbUpgrade gnome-menus-debuginfoUpgrade gnome-control-centerUpgrade mozjs60-develUpgrade gnome-terminal-nautilusUpgrade gnome-menus-develUpgrade nautilus-extensions-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade mutter-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-software-debuginfoUpgrade clutter-tests-debuginfoUpgrade LibRaw-develUpgrade clutter-develUpgrade gnome-software-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gjsUpgrade appstream-dataUpgrade gnome-boxes | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade gnome-menus-develUpgrade clutter-debugsourceUpgrade mozjs60-debugsourceUpgrade baobab-debuginfoUpgrade mozjs52-develUpgrade mozjs60-debuginfoUpgrade clutter-debuginfoUpgrade clutter-docUpgrade mozjs52Upgrade baobabUpgrade mozjs52-debugsourceUpgrade baobab-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade clutterUpgrade gnome-menus-debuginfoUpgrade mozjs52-debuginfoUpgrade mozjs60Upgrade mozjs60-develUpgrade gnome-menus-debugsourceUpgrade gnome-menusUpgrade clutter-devel | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-develUpgrade gvfs-backend-afcUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-backendsUpgrade gvfs-backend-sambaUpgrade gvfs-32bitUpgrade gvfs-lang | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub