An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vala-develUpgrade valaUpgrade gnome-menusUpgrade mozjs52Upgrade accountsservice-develUpgrade clutter-docUpgrade gnome-tweaksUpgrade baobabUpgrade mozjs60Upgrade clutterUpgrade mozjs60-develUpgrade gnome-menus-develUpgrade mozjs52-develUpgrade clutter-develUpgrade gjs-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gnome-menusUpgrade gnome-softwareUpgrade gnome-software-editorUpgrade gnome-terminalUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-remote-desktopUpgrade gnome-software-editor-debuginfoUpgrade gtk3-develUpgrade gnome-boxes-debugsourceUpgrade mozjs52Upgrade gnome-control-center-debuginfoUpgrade gtk3-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-session-debuginfoUpgrade gnome-control-centerUpgrade gvfs-archiveUpgrade gvfs-afc-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade vinagreUpgrade evince-browser-pluginUpgrade gdm-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gvfs-develUpgrade nautilusUpgrade accountsservice-libs-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-online-accounts-develUpgrade evince-nautilusUpgrade gnome-software-debuginfoUpgrade evince-debugsourceUpgrade nautilus-extensionsUpgrade gvfs-smbUpgrade gvfsUpgrade gnome-remote-desktop-debuginfoUpgrade nautilus-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade LibRaw-debugsourceUpgrade libvncserver-debugsourceUpgrade appstream-dataUpgrade gvfs-fuseUpgrade gjs-debugsourceUpgrade gnome-boxes-debuginfoUpgrade libxsltUpgrade gnome-terminal-nautilusUpgrade gnome-settings-daemon-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gnome-shellUpgrade gvfs-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gsettings-desktop-schemasUpgrade gvfs-afcUpgrade mutterUpgrade gnome-online-accountsUpgrade gnome-shell-debugsourceUpgrade LibRawUpgrade vinagre-debuginfoUpgrade libxslt-debugsourceUpgrade gvfs-mtpUpgrade gnome-tweaksUpgrade gvfs-afp-debuginfoUpgrade gnome-sessionUpgrade nautilus-extensions-debuginfoUpgrade libvncserver-debuginfoUpgrade gvfs-goaUpgrade mozjs60-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-session-wayland-sessionUpgrade mozjs52-debugsourceUpgrade accountsservice-libsUpgrade mozjs52-debuginfoUpgrade clutter-tests-debuginfoUpgrade gvfs-client-debuginfoUpgrade mutter-tests-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gjsUpgrade LibRaw-debuginfoUpgrade gtk3-immodule-ximUpgrade baobab-debugsourceUpgrade clutter-debugsourceUpgrade evinceUpgrade gtk-update-icon-cacheUpgrade clutter-debuginfoUpgrade gnome-menus-debugsourceUpgrade baobabUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-debuginfoUpgrade gvfs-clientUpgrade gnome-control-center-debugsourceUpgrade gvfs-smb-debuginfoUpgrade accountsserviceUpgrade gnome-terminal-debuginfoUpgrade mutter-debugsourceUpgrade libxslt-develUpgrade gnome-control-center-filesystemUpgrade gvfs-debugsourceUpgrade gvfs-afpUpgrade mozjs60Upgrade gnome-session-xsessionUpgrade mozjs52-devel-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-goa-debuginfoUpgrade mutter-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gjs-debuginfoUpgrade evince-libs-debuginfoUpgrade libvncserverUpgrade clutterUpgrade libxslt-debuginfoUpgrade gnome-shell-debuginfoUpgrade vinagre-debugsourceUpgrade gdmUpgrade evince-nautilus-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-software-debugsourceUpgrade accountsservice-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gdm-debuginfoUpgrade gvfs-gphoto2Upgrade gnome-menus-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-terminal-debugsourceUpgrade gnome-boxesUpgrade baobab-debuginfoUpgrade evince-libsUpgrade evince-debuginfoUpgrade gnome-session-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gtk3Upgrade gnome-settings-daemon | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfsUpgrade gvfs-afcUpgrade gvfs-afpUpgrade gvfs-archiveUpgrade gvfs-develUpgrade gvfs-clientUpgrade gvfs-gphoto2Upgrade gvfs-fuseUpgrade gvfs-mtpUpgrade gvfs-goaUpgrade gvfs-smb | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-afcUpgrade gvfs-afpUpgrade gvfs-clientUpgrade gvfs-mtpUpgrade gvfs-gphoto2Upgrade gvfs-smbUpgrade gvfs-goaUpgrade gvfs-archiveUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-fuse | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade clutterUpgrade gnome-control-center-filesystemUpgrade gtk-update-icon-cacheUpgrade gnome-session-xsessionUpgrade gnome-menus-develUpgrade accountsservice-libsUpgrade mutter-develUpgrade evinceUpgrade gnome-terminalUpgrade gjsUpgrade mutterUpgrade gtk3Upgrade gnome-sessionUpgrade mozjs60Upgrade gnome-boxesUpgrade gnome-menusUpgrade clutter-develUpgrade gtk3-immodule-ximUpgrade accountsserviceUpgrade mozjs60-develUpgrade gnome-settings-daemonUpgrade libvncserverUpgrade gnome-session-wayland-sessionUpgrade gsettings-desktop-schemas-develUpgrade vala-develUpgrade gdmUpgrade gnome-softwareUpgrade evince-browser-pluginUpgrade gnome-terminal-nautilusUpgrade valaUpgrade gnome-online-accounts-develUpgrade gnome-tweaksUpgrade libxslt-develUpgrade clutter-docUpgrade LibRaw-develUpgrade gtk3-develUpgrade mozjs52Upgrade evince-libsUpgrade libvncserver-develUpgrade gjs-develUpgrade vinagreUpgrade gnome-shellUpgrade gnome-software-editorUpgrade libxsltUpgrade appstream-dataUpgrade LibRawUpgrade gsettings-desktop-schemasUpgrade accountsservice-develUpgrade gnome-remote-desktopUpgrade nautilusUpgrade gnome-control-centerUpgrade nautilus-extensionsUpgrade mozjs52-develUpgrade evince-nautilusUpgrade nautilus-develUpgrade gnome-online-accounts | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gtk3Upgrade gnome-menus-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-sessionUpgrade gnome-online-accounts-develUpgrade gnome-online-accounts-debugsourceUpgrade evince-nautilusUpgrade gnome-session-xsessionUpgrade clutter-docUpgrade vinagre-debugsourceUpgrade baobabUpgrade gvfs-clientUpgrade accountsservice-develUpgrade clutter-debuginfoUpgrade gtk-update-icon-cacheUpgrade gvfs-fuse-debuginfoUpgrade accountsserviceUpgrade gnome-software-editor-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-filesystemUpgrade gnome-software-debugsourceUpgrade valadoc-debuginfoUpgrade gnome-remote-desktop-debugsourceNo solution existsUpgrade vala-debuginfoUpgrade LibRaw-debuginfoUpgrade gvfs-afpUpgrade clutterUpgrade gtk3-debugsourceUpgrade valaUpgrade gnome-control-center-debuginfoUpgrade evince-libs-debuginfoUpgrade gvfsUpgrade gvfs-afcUpgrade gtk3-devel-debuginfoUpgrade mozjs52Upgrade gvfs-archive-debuginfoUpgrade gnome-online-accountsUpgrade vinagre-debuginfoUpgrade libvncserver-debugsourceUpgrade mutter-debuginfoUpgrade gnome-menusUpgrade evince-browser-pluginUpgrade gnome-shellUpgrade vinagreUpgrade gnome-boxes-debuginfoUpgrade libxsltUpgrade mozjs60-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-terminal-nautilusUpgrade vala-develUpgrade evince-nautilus-debuginfoUpgrade gtk3-develUpgrade gnome-terminalUpgrade gnome-terminal-debuginfoUpgrade gnome-softwareUpgrade mozjs60Upgrade accountsservice-libsUpgrade gvfs-afp-debuginfoUpgrade gvfs-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-session-debugsourceUpgrade nautilus-extensionsUpgrade accountsservice-libs-debuginfoUpgrade gnome-settings-daemonUpgrade baobab-debuginfoUpgrade gvfs-fuseUpgrade gvfs-develUpgrade gdm-debuginfoUpgrade gvfs-afc-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-archiveUpgrade LibRawUpgrade gvfs-smbUpgrade baobab-debugsourceUpgrade gvfs-goa-debuginfoUpgrade gnome-tweaksUpgrade gtk3-debuginfoUpgrade gvfs-mtpUpgrade mutter-debugsourceUpgrade vala-debugsourceUpgrade gnome-boxes-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-remote-desktopUpgrade gvfs-mtp-debuginfoUpgrade gvfs-gphoto2Upgrade gjs-develUpgrade gtk3-immodule-ximUpgrade gjsUpgrade gnome-software-editorUpgrade gvfs-client-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-terminal-debugsourceUpgrade clutter-tests-debuginfoUpgrade gjs-debuginfoUpgrade gsettings-desktop-schemasUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-debuginfoUpgrade libxslt-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gnome-boxesUpgrade gnome-software-debuginfoUpgrade libvncserver-develUpgrade gdmUpgrade gnome-shell-debugsourceUpgrade evince-libsUpgrade gnome-settings-daemon-debugsourceUpgrade mutter-develUpgrade gnome-menus-debuginfoUpgrade libxslt-develUpgrade mozjs60-develUpgrade LibRaw-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-remote-desktop-debuginfoUpgrade libvncserver-debuginfoUpgrade gdm-debugsourceUpgrade mutterUpgrade evinceUpgrade evince-debuginfoUpgrade clutter-develUpgrade gnome-control-center-debugsourceUpgrade nautilus-develUpgrade libvncserverUpgrade libxslt-debuginfoUpgrade gnome-menus-develUpgrade gnome-session-debuginfoUpgrade evince-debugsourceUpgrade gnome-control-centerUpgrade accountsservice-debuginfoUpgrade appstream-dataUpgrade gnome-online-accounts-debuginfoUpgrade nautilusUpgrade mozjs52-debugsourceUpgrade gvfs-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gvfs-goaUpgrade nautilus-debuginfoUpgrade clutter-debugsourceUpgrade mozjs60-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade mozjs52-develUpgrade gtk3-tests-debuginfoUpgrade gjs-debugsourceUpgrade accountsservice-debugsourceUpgrade mozjs52-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gjs-tests-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs52Upgrade mozjs52-debuginfoUpgrade mozjs60-develUpgrade baobab-debuginfoUpgrade mozjs60-debuginfoUpgrade clutter-docUpgrade clutter-debuginfoUpgrade gnome-menusUpgrade baobab-debugsourceUpgrade gnome-menus-debuginfoUpgrade baobabUpgrade mozjs52-develUpgrade mozjs52-debugsourceUpgrade mozjs60Upgrade clutterUpgrade mozjs52-devel-debuginfoUpgrade gnome-menus-develUpgrade clutter-develUpgrade clutter-debugsourceUpgrade gnome-menus-debugsourceUpgrade mozjs60-debugsource | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-develUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-langUpgrade gvfs-32bitUpgrade gvfs-backend-afcUpgrade gvfs-backend-sambaUpgrade gvfs-backends | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub