An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade clutter-docUpgrade clutterUpgrade gnome-tweaksUpgrade mozjs52Upgrade accountsservice-develUpgrade baobabUpgrade vala-develUpgrade gnome-menusUpgrade valaUpgrade mozjs60Upgrade mozjs60-develUpgrade gjs-develUpgrade clutter-develUpgrade gnome-menus-develUpgrade mozjs52-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gvfs-afc-debuginfoUpgrade gvfs-smbUpgrade gvfs-mtpUpgrade nautilus-debuginfoUpgrade nautilus-extensionsUpgrade gvfs-gphoto2-debuginfoUpgrade vinagre-debuginfoUpgrade gvfs-debuginfoUpgrade gvfsUpgrade gnome-software-debuginfoUpgrade vinagreUpgrade libvncserver-debuginfoUpgrade libxsltUpgrade gnome-terminal-nautilusUpgrade evince-nautilusUpgrade gvfs-archive-debuginfoUpgrade gnome-shellUpgrade gnome-terminalUpgrade gtk-update-icon-cache-debuginfoUpgrade gvfs-afcUpgrade appstream-dataUpgrade evince-debugsourceUpgrade LibRaw-debugsourceUpgrade gnome-boxes-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-softwareUpgrade gtk3-immodules-debuginfoUpgrade gvfs-goaUpgrade libxslt-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-control-centerUpgrade gnome-online-accounts-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-sessionUpgrade gtk3-devel-debuginfoUpgrade gnome-tweaksUpgrade evince-browser-pluginUpgrade gnome-session-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-develUpgrade libvncserver-debugsourceUpgrade gvfs-afp-debuginfoUpgrade gdm-debugsourceUpgrade gnome-software-editorUpgrade gvfs-develUpgrade gnome-boxes-debugsourceUpgrade gnome-menusUpgrade gnome-remote-desktop-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-develUpgrade gnome-online-accountsUpgrade gnome-shell-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade gjs-debugsourceUpgrade mutterUpgrade nautilusUpgrade accountsservice-libs-debuginfoUpgrade gnome-remote-desktopUpgrade gvfs-archiveUpgrade gvfs-fuseUpgrade LibRawUpgrade mozjs52Upgrade gnome-control-center-debuginfoUpgrade nautilus-debugsourceUpgrade mutter-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gsettings-desktop-schemas-develUpgrade accountsservice-libsUpgrade gvfs-mtp-debuginfoUpgrade gnome-menus-debugsourceUpgrade gnome-boxesUpgrade gvfs-gphoto2Upgrade LibRaw-samples-debuginfoUpgrade accountsservice-debugsourceUpgrade evince-nautilus-debuginfoUpgrade clutterUpgrade evince-libs-debuginfoUpgrade libvncserverUpgrade gvfs-fuse-debuginfoUpgrade gjs-debuginfoUpgrade gvfs-afpUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-menus-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-terminal-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-shell-debuginfoUpgrade gnome-software-debugsourceUpgrade gtk3-debugsourceUpgrade gjs-tests-debuginfoUpgrade gdm-debuginfoUpgrade gdmUpgrade libxslt-debuginfoUpgrade gvfs-debugsourceUpgrade gjsUpgrade LibRaw-debuginfoUpgrade accountsservice-debuginfoUpgrade baobabUpgrade gtk3-tests-debuginfoUpgrade mutter-debugsourceUpgrade gvfs-clientUpgrade evinceUpgrade gnome-settings-daemon-debugsourceUpgrade gvfs-client-debuginfoUpgrade evince-debuginfoUpgrade clutter-debuginfoUpgrade accountsserviceUpgrade gnome-settings-daemonUpgrade clutter-tests-debuginfoUpgrade baobab-debuginfoUpgrade evince-libsUpgrade mutter-tests-debuginfoUpgrade gnome-session-debugsourceUpgrade mozjs52-debuginfoUpgrade mozjs52-debugsourceUpgrade gtk3Upgrade vinagre-debugsourceUpgrade libxslt-develUpgrade gvfs-smb-debuginfoUpgrade mozjs60Upgrade gtk3-immodule-ximUpgrade baobab-debugsourceUpgrade gtk-update-icon-cacheUpgrade clutter-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-terminal-debugsource | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-clientUpgrade gvfs-develUpgrade gvfs-archiveUpgrade gvfsUpgrade gvfs-afpUpgrade gvfs-afcUpgrade gvfs-mtpUpgrade gvfs-gphoto2Upgrade gvfs-fuseUpgrade gvfs-smbUpgrade gvfs-goa | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfsUpgrade gvfs-goaUpgrade gvfs-fuseUpgrade gvfs-archiveUpgrade gvfs-smbUpgrade gvfs-gphoto2Upgrade gvfs-develUpgrade gvfs-clientUpgrade gvfs-afpUpgrade gvfs-mtpUpgrade gvfs-afc | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade accountsservice-develUpgrade appstream-dataUpgrade gtk3-develUpgrade nautilus-develUpgrade gjs-develUpgrade evince-libsUpgrade gnome-terminal-nautilusUpgrade gnome-shellUpgrade gsettings-desktop-schemasUpgrade vinagreUpgrade vala-develUpgrade evince-nautilusUpgrade gnome-tweaksUpgrade gnome-online-accounts-develUpgrade LibRawUpgrade gnome-online-accountsUpgrade mozjs52-develUpgrade clutter-docUpgrade valaUpgrade libxslt-develUpgrade gdmUpgrade gnome-softwareUpgrade gnome-software-editorUpgrade libxsltUpgrade evince-browser-pluginUpgrade gnome-control-centerUpgrade gnome-remote-desktopUpgrade nautilusUpgrade nautilus-extensionsUpgrade libvncserver-develUpgrade mozjs52Upgrade LibRaw-develUpgrade gjsUpgrade clutterUpgrade gnome-control-center-filesystemUpgrade gnome-session-xsessionUpgrade accountsservice-libsUpgrade gsettings-desktop-schemas-develUpgrade accountsserviceUpgrade gnome-boxesUpgrade clutter-develUpgrade libvncserverUpgrade gnome-sessionUpgrade gnome-terminalUpgrade evinceUpgrade mutter-develUpgrade mozjs60Upgrade gtk3Upgrade gnome-menus-develUpgrade gtk-update-icon-cacheUpgrade gnome-session-wayland-sessionUpgrade mutterUpgrade mozjs60-develUpgrade gnome-menusUpgrade gtk3-immodule-ximUpgrade gnome-settings-daemon | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-session-wayland-sessionUpgrade vinagre-debuginfoUpgrade accountsserviceUpgrade gvfs-fuse-debuginfoUpgrade evince-browser-pluginUpgrade gnome-online-accounts-debugsourceUpgrade gtk-update-icon-cacheUpgrade mutter-tests-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-sessionUpgrade mutter-debuginfoUpgrade gtk3Upgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-menus-debugsourceUpgrade mozjs60-debugsourceUpgrade gvfsUpgrade evince-libs-debuginfoUpgrade evince-nautilusUpgrade gvfs-archive-debuginfoUpgrade gtk3-devel-debuginfoUpgrade libxsltUpgrade mozjs52Upgrade evince-browser-plugin-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-menusUpgrade gnome-software-debugsourceUpgrade gnome-softwareUpgrade gvfs-afcUpgrade gnome-terminal-debuginfoUpgrade valadoc-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade valaUpgrade clutterUpgrade vala-debuginfoUpgrade gnome-online-accountsUpgrade accountsservice-develUpgrade gnome-control-center-debuginfoUpgrade gnome-control-center-filesystemUpgrade gvfs-afpNo solution existsUpgrade LibRaw-debuginfoUpgrade gvfs-debuginfoUpgrade gnome-session-xsessionUpgrade vinagre-debugsourceUpgrade baobabUpgrade gvfs-clientUpgrade evince-nautilus-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade accountsservice-libsUpgrade gnome-boxes-debuginfoUpgrade clutter-docUpgrade gdm-debuginfoUpgrade vala-develUpgrade gtk3-debugsourceUpgrade clutter-debuginfoUpgrade mozjs60Upgrade gvfs-afp-debuginfoUpgrade gnome-shellUpgrade gnome-session-debugsourceUpgrade gvfs-fuseUpgrade gtk3-develUpgrade accountsservice-libs-debuginfoUpgrade gnome-terminalUpgrade vinagreUpgrade gvfs-develUpgrade libvncserver-debugsourceUpgrade baobab-debuginfoUpgrade gnome-terminal-nautilusUpgrade nautilus-extensionsUpgrade LibRaw-debugsourceUpgrade gnome-software-editor-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gvfs-archiveUpgrade gnome-remote-desktopUpgrade gdmUpgrade gvfs-debugsourceUpgrade evince-debugsourceUpgrade gvfs-smb-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade mozjs60-debuginfoUpgrade mozjs60-develUpgrade gnome-boxesUpgrade gtk3-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-boxes-debugsourceUpgrade baobab-debugsourceUpgrade libxslt-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-tweaksUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-smbUpgrade gnome-control-center-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gjsUpgrade clutter-tests-debuginfoUpgrade gjs-develUpgrade gnome-software-debuginfoUpgrade gvfs-gphoto2Upgrade gnome-menus-debuginfoUpgrade appstream-dataUpgrade gsettings-desktop-schemasUpgrade libvncserver-develUpgrade vala-debugsourceUpgrade accountsservice-debuginfoUpgrade evinceUpgrade mutterUpgrade gdm-debugsourceUpgrade mutter-debugsourceUpgrade libvncserver-debuginfoUpgrade gvfs-goaUpgrade gtk3-immodule-ximUpgrade mutter-develUpgrade nautilus-develUpgrade gnome-menus-develUpgrade LibRaw-develUpgrade gvfs-mtpUpgrade nautilus-debuginfoUpgrade gvfs-goa-debuginfoUpgrade evince-debuginfoUpgrade libvncserverUpgrade mozjs52-debugsourceUpgrade gnome-session-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade LibRawUpgrade gtk3-tests-debuginfoUpgrade libxslt-develUpgrade mozjs52-develUpgrade accountsservice-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gjs-tests-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gjs-debugsourceUpgrade gnome-control-centerUpgrade mozjs52-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade nautilus-debugsourceUpgrade gjs-debuginfoUpgrade libxslt-debuginfoUpgrade clutter-develUpgrade gnome-software-editorUpgrade evince-libsUpgrade gnome-terminal-debugsourceUpgrade clutter-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gvfs-client-debuginfoUpgrade nautilus | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs52-debuginfoUpgrade clutter-debuginfoUpgrade gnome-menusUpgrade baobabUpgrade mozjs52Upgrade mozjs60-develUpgrade baobab-debugsourceUpgrade baobab-debuginfoUpgrade gnome-menus-debuginfoUpgrade mozjs60-debuginfoUpgrade clutter-docUpgrade clutterUpgrade mozjs52-devel-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs60Upgrade mozjs60-debugsourceUpgrade gnome-menus-develUpgrade clutter-debugsourceUpgrade clutter-develUpgrade gnome-menus-debugsourceUpgrade mozjs52-devel | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-develUpgrade gvfs-backend-sambaUpgrade gvfs-langUpgrade gvfs-backendsUpgrade gvfs-backend-afcUpgrade gvfs-32bit | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub