An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-accountsservice-develalma-upgrade-baobabalma-upgrade-clutteralma-upgrade-clutter-develalma-upgrade-clutter-docalma-upgrade-gjs-develalma-upgrade-gnome-menusalma-upgrade-gnome-menus-develalma-upgrade-gnome-tweaksalma-upgrade-mozjs52alma-upgrade-mozjs52-develalma-upgrade-mozjs60alma-upgrade-mozjs60-develalma-upgrade-valaalma-upgrade-vala-devel | May 4, 2022 | May 29, 2019 | |
| Alpine Linux | alpine-linux-upgrade-gvfs | Aug 22, 2024 | May 29, 2019 | |
| Centos_linux | — | centos-upgrade-accountsservicecentos-upgrade-accountsservice-debuginfocentos-upgrade-accountsservice-debugsourcecentos-upgrade-accountsservice-libscentos-upgrade-accountsservice-libs-debuginfocentos-upgrade-appstream-datacentos-upgrade-baobabcentos-upgrade-baobab-debuginfocentos-upgrade-baobab-debugsourcecentos-upgrade-cluttercentos-upgrade-clutter-debuginfocentos-upgrade-clutter-debugsourcecentos-upgrade-clutter-tests-debuginfocentos-upgrade-evincecentos-upgrade-evince-browser-plugincentos-upgrade-evince-browser-plugin-debuginfocentos-upgrade-evince-debuginfocentos-upgrade-evince-debugsourcecentos-upgrade-evince-libscentos-upgrade-evince-libs-debuginfocentos-upgrade-evince-nautiluscentos-upgrade-evince-nautilus-debuginfocentos-upgrade-gdmcentos-upgrade-gdm-debuginfocentos-upgrade-gdm-debugsourcecentos-upgrade-gjscentos-upgrade-gjs-debuginfocentos-upgrade-gjs-debugsourcecentos-upgrade-gjs-tests-debuginfocentos-upgrade-gnome-boxescentos-upgrade-gnome-boxes-debuginfocentos-upgrade-gnome-boxes-debugsourcecentos-upgrade-gnome-control-centercentos-upgrade-gnome-control-center-debuginfocentos-upgrade-gnome-control-center-debugsourcecentos-upgrade-gnome-control-center-filesystemcentos-upgrade-gnome-menuscentos-upgrade-gnome-menus-debuginfocentos-upgrade-gnome-menus-debugsourcecentos-upgrade-gnome-online-accountscentos-upgrade-gnome-online-accounts-debuginfocentos-upgrade-gnome-online-accounts-debugsourcecentos-upgrade-gnome-online-accounts-develcentos-upgrade-gnome-remote-desktopcentos-upgrade-gnome-remote-desktop-debuginfocentos-upgrade-gnome-remote-desktop-debugsourcecentos-upgrade-gnome-sessioncentos-upgrade-gnome-session-debuginfocentos-upgrade-gnome-session-debugsourcecentos-upgrade-gnome-session-wayland-sessioncentos-upgrade-gnome-session-xsessioncentos-upgrade-gnome-settings-daemoncentos-upgrade-gnome-settings-daemon-debuginfocentos-upgrade-gnome-settings-daemon-debugsourcecentos-upgrade-gnome-shellcentos-upgrade-gnome-shell-debuginfocentos-upgrade-gnome-shell-debugsourcecentos-upgrade-gnome-softwarecentos-upgrade-gnome-software-debuginfocentos-upgrade-gnome-software-debugsourcecentos-upgrade-gnome-software-editorcentos-upgrade-gnome-software-editor-debuginfocentos-upgrade-gnome-terminalcentos-upgrade-gnome-terminal-debuginfocentos-upgrade-gnome-terminal-debugsourcecentos-upgrade-gnome-terminal-nautiluscentos-upgrade-gnome-terminal-nautilus-debuginfocentos-upgrade-gnome-tweakscentos-upgrade-gsettings-desktop-schemascentos-upgrade-gsettings-desktop-schemas-develcentos-upgrade-gtk-update-icon-cachecentos-upgrade-gtk-update-icon-cache-debuginfocentos-upgrade-gtk3centos-upgrade-gtk3-debuginfocentos-upgrade-gtk3-debugsourcecentos-upgrade-gtk3-develcentos-upgrade-gtk3-devel-debuginfocentos-upgrade-gtk3-immodule-ximcentos-upgrade-gtk3-immodule-xim-debuginfocentos-upgrade-gtk3-immodules-debuginfocentos-upgrade-gtk3-tests-debuginfocentos-upgrade-gvfscentos-upgrade-gvfs-afccentos-upgrade-gvfs-afc-debuginfocentos-upgrade-gvfs-afpcentos-upgrade-gvfs-afp-debuginfocentos-upgrade-gvfs-archivecentos-upgrade-gvfs-archive-debuginfocentos-upgrade-gvfs-clientcentos-upgrade-gvfs-client-debuginfocentos-upgrade-gvfs-debuginfocentos-upgrade-gvfs-debugsourcecentos-upgrade-gvfs-develcentos-upgrade-gvfs-fusecentos-upgrade-gvfs-fuse-debuginfocentos-upgrade-gvfs-goacentos-upgrade-gvfs-goa-debuginfocentos-upgrade-gvfs-gphoto2centos-upgrade-gvfs-gphoto2-debuginfocentos-upgrade-gvfs-mtpcentos-upgrade-gvfs-mtp-debuginfocentos-upgrade-gvfs-smbcentos-upgrade-gvfs-smb-debuginfocentos-upgrade-librawcentos-upgrade-libraw-debuginfocentos-upgrade-libraw-debugsourcecentos-upgrade-libraw-samples-debuginfocentos-upgrade-libvncservercentos-upgrade-libvncserver-debuginfocentos-upgrade-libvncserver-debugsourcecentos-upgrade-libxsltcentos-upgrade-libxslt-debuginfocentos-upgrade-libxslt-debugsourcecentos-upgrade-libxslt-develcentos-upgrade-mozjs52centos-upgrade-mozjs52-debuginfocentos-upgrade-mozjs52-debugsourcecentos-upgrade-mozjs52-devel-debuginfocentos-upgrade-mozjs60centos-upgrade-mozjs60-debuginfocentos-upgrade-mozjs60-debugsourcecentos-upgrade-muttercentos-upgrade-mutter-debuginfocentos-upgrade-mutter-debugsourcecentos-upgrade-mutter-tests-debuginfocentos-upgrade-nautiluscentos-upgrade-nautilus-debuginfocentos-upgrade-nautilus-debugsourcecentos-upgrade-nautilus-extensionscentos-upgrade-nautilus-extensions-debuginfocentos-upgrade-vinagrecentos-upgrade-vinagre-debuginfocentos-upgrade-vinagre-debugsource | Apr 29, 2020 | May 29, 2019 |
| Debian | debian-upgrade-gvfs | Jul 30, 2024 | May 29, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-gvfshuawei-euleros-2_0_sp5-upgrade-gvfs-afchuawei-euleros-2_0_sp5-upgrade-gvfs-afphuawei-euleros-2_0_sp5-upgrade-gvfs-archivehuawei-euleros-2_0_sp5-upgrade-gvfs-clienthuawei-euleros-2_0_sp5-upgrade-gvfs-develhuawei-euleros-2_0_sp5-upgrade-gvfs-fusehuawei-euleros-2_0_sp5-upgrade-gvfs-goahuawei-euleros-2_0_sp5-upgrade-gvfs-gphoto2huawei-euleros-2_0_sp5-upgrade-gvfs-mtphuawei-euleros-2_0_sp5-upgrade-gvfs-smb | Sep 24, 2019 | May 29, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-gvfshuawei-euleros-2_0_sp8-upgrade-gvfs-afchuawei-euleros-2_0_sp8-upgrade-gvfs-afphuawei-euleros-2_0_sp8-upgrade-gvfs-archivehuawei-euleros-2_0_sp8-upgrade-gvfs-clienthuawei-euleros-2_0_sp8-upgrade-gvfs-develhuawei-euleros-2_0_sp8-upgrade-gvfs-fusehuawei-euleros-2_0_sp8-upgrade-gvfs-goahuawei-euleros-2_0_sp8-upgrade-gvfs-gphoto2huawei-euleros-2_0_sp8-upgrade-gvfs-mtphuawei-euleros-2_0_sp8-upgrade-gvfs-smb | Sep 30, 2019 | May 29, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-accountsserviceoracle-linux-upgrade-accountsservice-develoracle-linux-upgrade-accountsservice-libsoracle-linux-upgrade-appstream-dataoracle-linux-upgrade-clutteroracle-linux-upgrade-clutter-develoracle-linux-upgrade-clutter-docoracle-linux-upgrade-evinceoracle-linux-upgrade-evince-browser-pluginoracle-linux-upgrade-evince-libsoracle-linux-upgrade-evince-nautilusoracle-linux-upgrade-gdmoracle-linux-upgrade-gjsoracle-linux-upgrade-gjs-develoracle-linux-upgrade-gnome-boxesoracle-linux-upgrade-gnome-control-centeroracle-linux-upgrade-gnome-control-center-filesystemoracle-linux-upgrade-gnome-menusoracle-linux-upgrade-gnome-menus-develoracle-linux-upgrade-gnome-online-accountsoracle-linux-upgrade-gnome-online-accounts-develoracle-linux-upgrade-gnome-remote-desktoporacle-linux-upgrade-gnome-sessionoracle-linux-upgrade-gnome-session-wayland-sessionoracle-linux-upgrade-gnome-session-xsessionoracle-linux-upgrade-gnome-settings-daemonoracle-linux-upgrade-gnome-shelloracle-linux-upgrade-gnome-softwareoracle-linux-upgrade-gnome-software-editororacle-linux-upgrade-gnome-terminaloracle-linux-upgrade-gnome-terminal-nautilusoracle-linux-upgrade-gnome-tweaksoracle-linux-upgrade-gsettings-desktop-schemasoracle-linux-upgrade-gsettings-desktop-schemas-develoracle-linux-upgrade-gtk3oracle-linux-upgrade-gtk3-develoracle-linux-upgrade-gtk3-immodule-ximoracle-linux-upgrade-gtk-update-icon-cacheoracle-linux-upgrade-libraworacle-linux-upgrade-libraw-develoracle-linux-upgrade-libvncserveroracle-linux-upgrade-libvncserver-develoracle-linux-upgrade-libxsltoracle-linux-upgrade-libxslt-develoracle-linux-upgrade-mozjs52oracle-linux-upgrade-mozjs52-develoracle-linux-upgrade-mozjs60oracle-linux-upgrade-mozjs60-develoracle-linux-upgrade-mutteroracle-linux-upgrade-mutter-develoracle-linux-upgrade-nautilusoracle-linux-upgrade-nautilus-develoracle-linux-upgrade-nautilus-extensionsoracle-linux-upgrade-valaoracle-linux-upgrade-vala-develoracle-linux-upgrade-vinagre | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | May 29, 2019 | |
| Redhat_linux | redhat-upgrade-accountsserviceredhat-upgrade-accountsservice-debuginforedhat-upgrade-accountsservice-debugsourceredhat-upgrade-accountsservice-develredhat-upgrade-accountsservice-libsredhat-upgrade-accountsservice-libs-debuginforedhat-upgrade-appstream-dataredhat-upgrade-baobabredhat-upgrade-baobab-debuginforedhat-upgrade-baobab-debugsourceredhat-upgrade-clutterredhat-upgrade-clutter-debuginforedhat-upgrade-clutter-debugsourceredhat-upgrade-clutter-develredhat-upgrade-clutter-docredhat-upgrade-clutter-tests-debuginforedhat-upgrade-evinceredhat-upgrade-evince-browser-pluginredhat-upgrade-evince-browser-plugin-debuginforedhat-upgrade-evince-debuginforedhat-upgrade-evince-debugsourceredhat-upgrade-evince-libsredhat-upgrade-evince-libs-debuginforedhat-upgrade-evince-nautilusredhat-upgrade-evince-nautilus-debuginforedhat-upgrade-gdmredhat-upgrade-gdm-debuginforedhat-upgrade-gdm-debugsourceredhat-upgrade-gjsredhat-upgrade-gjs-debuginforedhat-upgrade-gjs-debugsourceredhat-upgrade-gjs-develredhat-upgrade-gjs-tests-debuginforedhat-upgrade-gnome-boxesredhat-upgrade-gnome-boxes-debuginforedhat-upgrade-gnome-boxes-debugsourceredhat-upgrade-gnome-control-centerredhat-upgrade-gnome-control-center-debuginforedhat-upgrade-gnome-control-center-debugsourceredhat-upgrade-gnome-control-center-filesystemredhat-upgrade-gnome-menusredhat-upgrade-gnome-menus-debuginforedhat-upgrade-gnome-menus-debugsourceredhat-upgrade-gnome-menus-develredhat-upgrade-gnome-online-accountsredhat-upgrade-gnome-online-accounts-debuginforedhat-upgrade-gnome-online-accounts-debugsourceredhat-upgrade-gnome-online-accounts-develredhat-upgrade-gnome-remote-desktopredhat-upgrade-gnome-remote-desktop-debuginforedhat-upgrade-gnome-remote-desktop-debugsourceredhat-upgrade-gnome-sessionredhat-upgrade-gnome-session-debuginforedhat-upgrade-gnome-session-debugsourceredhat-upgrade-gnome-session-wayland-sessionredhat-upgrade-gnome-session-xsessionredhat-upgrade-gnome-settings-daemonredhat-upgrade-gnome-settings-daemon-debuginforedhat-upgrade-gnome-settings-daemon-debugsourceredhat-upgrade-gnome-shellredhat-upgrade-gnome-shell-debuginforedhat-upgrade-gnome-shell-debugsourceredhat-upgrade-gnome-softwareredhat-upgrade-gnome-software-debuginforedhat-upgrade-gnome-software-debugsourceredhat-upgrade-gnome-software-editorredhat-upgrade-gnome-software-editor-debuginforedhat-upgrade-gnome-terminalredhat-upgrade-gnome-terminal-debuginforedhat-upgrade-gnome-terminal-debugsourceredhat-upgrade-gnome-terminal-nautilusredhat-upgrade-gnome-terminal-nautilus-debuginforedhat-upgrade-gnome-tweaksredhat-upgrade-gsettings-desktop-schemasredhat-upgrade-gsettings-desktop-schemas-develredhat-upgrade-gtk-update-icon-cacheredhat-upgrade-gtk-update-icon-cache-debuginforedhat-upgrade-gtk3redhat-upgrade-gtk3-debuginforedhat-upgrade-gtk3-debugsourceredhat-upgrade-gtk3-develredhat-upgrade-gtk3-devel-debuginforedhat-upgrade-gtk3-immodule-ximredhat-upgrade-gtk3-immodule-xim-debuginforedhat-upgrade-gtk3-immodules-debuginforedhat-upgrade-gtk3-tests-debuginforedhat-upgrade-gvfsredhat-upgrade-gvfs-afcredhat-upgrade-gvfs-afc-debuginforedhat-upgrade-gvfs-afpredhat-upgrade-gvfs-afp-debuginforedhat-upgrade-gvfs-archiveredhat-upgrade-gvfs-archive-debuginforedhat-upgrade-gvfs-clientredhat-upgrade-gvfs-client-debuginforedhat-upgrade-gvfs-debuginforedhat-upgrade-gvfs-debugsourceredhat-upgrade-gvfs-develredhat-upgrade-gvfs-fuseredhat-upgrade-gvfs-fuse-debuginforedhat-upgrade-gvfs-goaredhat-upgrade-gvfs-goa-debuginforedhat-upgrade-gvfs-gphoto2redhat-upgrade-gvfs-gphoto2-debuginforedhat-upgrade-gvfs-mtpredhat-upgrade-gvfs-mtp-debuginforedhat-upgrade-gvfs-smbredhat-upgrade-gvfs-smb-debuginforedhat-upgrade-librawredhat-upgrade-libraw-debuginforedhat-upgrade-libraw-debugsourceredhat-upgrade-libraw-develredhat-upgrade-libraw-samples-debuginforedhat-upgrade-libvncserverredhat-upgrade-libvncserver-debuginforedhat-upgrade-libvncserver-debugsourceredhat-upgrade-libvncserver-develredhat-upgrade-libxsltredhat-upgrade-libxslt-debuginforedhat-upgrade-libxslt-debugsourceredhat-upgrade-libxslt-develredhat-upgrade-mozjs52redhat-upgrade-mozjs52-debuginforedhat-upgrade-mozjs52-debugsourceredhat-upgrade-mozjs52-develredhat-upgrade-mozjs52-devel-debuginforedhat-upgrade-mozjs60redhat-upgrade-mozjs60-debuginforedhat-upgrade-mozjs60-debugsourceredhat-upgrade-mozjs60-develredhat-upgrade-mutterredhat-upgrade-mutter-debuginforedhat-upgrade-mutter-debugsourceredhat-upgrade-mutter-develredhat-upgrade-mutter-tests-debuginforedhat-upgrade-nautilusredhat-upgrade-nautilus-debuginforedhat-upgrade-nautilus-debugsourceredhat-upgrade-nautilus-develredhat-upgrade-nautilus-extensionsredhat-upgrade-nautilus-extensions-debuginforedhat-upgrade-valaredhat-upgrade-vala-debuginforedhat-upgrade-vala-debugsourceredhat-upgrade-vala-develredhat-upgrade-valadoc-debuginforedhat-upgrade-vinagreredhat-upgrade-vinagre-debuginforedhat-upgrade-vinagre-debugsource | Apr 29, 2020 | May 29, 2019 | |
| Rocky_linux | rocky-upgrade-baobabrocky-upgrade-baobab-debuginforocky-upgrade-baobab-debugsourcerocky-upgrade-clutterrocky-upgrade-clutter-debuginforocky-upgrade-clutter-debugsourcerocky-upgrade-clutter-develrocky-upgrade-clutter-docrocky-upgrade-gnome-menusrocky-upgrade-gnome-menus-debuginforocky-upgrade-gnome-menus-debugsourcerocky-upgrade-gnome-menus-develrocky-upgrade-mozjs52rocky-upgrade-mozjs52-debuginforocky-upgrade-mozjs52-debugsourcerocky-upgrade-mozjs52-develrocky-upgrade-mozjs52-devel-debuginforocky-upgrade-mozjs60rocky-upgrade-mozjs60-debuginforocky-upgrade-mozjs60-debugsourcerocky-upgrade-mozjs60-devel | Mar 12, 2024 | May 29, 2019 | |
| Suse | — | suse-upgrade-gvfssuse-upgrade-gvfs-32bitsuse-upgrade-gvfs-backend-afcsuse-upgrade-gvfs-backend-sambasuse-upgrade-gvfs-backendssuse-upgrade-gvfs-develsuse-upgrade-gvfs-fusesuse-upgrade-gvfs-lang | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | ubuntu-upgrade-gvfsubuntu-upgrade-gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub