An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-menusUpgrade valaUpgrade clutterUpgrade mozjs60Upgrade baobabUpgrade accountsservice-develUpgrade clutter-docUpgrade mozjs52Upgrade gnome-tweaksUpgrade vala-develUpgrade mozjs52-develUpgrade clutter-develUpgrade gjs-develUpgrade gnome-menus-develUpgrade mozjs60-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gnome-boxes-debugsourceUpgrade nautilus-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-control-centerUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-sessionUpgrade gnome-tweaksUpgrade evince-browser-plugin-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gvfs-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gvfsUpgrade gvfs-develUpgrade nautilus-extensionsUpgrade gnome-online-accounts-develUpgrade mozjs52Upgrade mozjs60-debugsourceUpgrade gtk3-debuginfoUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade gtk3-devel-debuginfoUpgrade libvncserver-debuginfoUpgrade gvfs-archiveUpgrade libxslt-debugsourceUpgrade gnome-session-debuginfoUpgrade gnome-remote-desktopUpgrade gnome-menusUpgrade gnome-online-accountsUpgrade libvncserver-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gnome-shellUpgrade gnome-shell-debugsourceUpgrade LibRawUpgrade mutterUpgrade gvfs-goaUpgrade gdm-debugsourceUpgrade gnome-software-editor-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gvfs-afc-debuginfoUpgrade nautilusUpgrade gjs-debugsourceUpgrade gvfs-mtpUpgrade gnome-software-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-terminal-nautilus-debuginfoUpgrade gvfs-afcUpgrade gtk3-immodules-debuginfoUpgrade gnome-control-center-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade vinagreUpgrade gsettings-desktop-schemasUpgrade gvfs-smbUpgrade evince-debugsourceUpgrade gnome-software-editorUpgrade gvfs-fuseUpgrade gvfs-gphoto2-debuginfoUpgrade vinagre-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gtk3-develUpgrade gnome-terminalUpgrade libxsltUpgrade appstream-dataUpgrade gtk-update-icon-cache-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-softwareUpgrade gnome-boxes-debuginfoUpgrade baobab-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-settings-daemonUpgrade gjsUpgrade gtk3Upgrade evince-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-afpUpgrade gvfs-goa-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gvfs-gphoto2Upgrade gnome-software-debugsourceUpgrade gdm-debuginfoUpgrade libxslt-debuginfoUpgrade gnome-menus-debuginfoUpgrade mutter-debugsourceUpgrade gtk3-debugsourceUpgrade gnome-session-wayland-sessionUpgrade baobab-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gdmUpgrade gnome-shell-debuginfoUpgrade gnome-session-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-terminal-debuginfoUpgrade mutter-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade evince-libsUpgrade gvfs-debugsourceUpgrade gnome-control-center-filesystemUpgrade accountsservice-debugsourceUpgrade gnome-boxesUpgrade clutterUpgrade evince-libs-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gjs-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-menus-debugsourceUpgrade clutter-debuginfoUpgrade accountsserviceUpgrade gtk-update-icon-cacheUpgrade mozjs60Upgrade baobabUpgrade gvfs-clientUpgrade gjs-tests-debuginfoUpgrade libvncserverUpgrade gtk3-immodule-ximUpgrade nautilus-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gnome-terminal-debugsourceUpgrade LibRaw-debuginfoUpgrade gnome-control-center-debugsourceUpgrade clutter-debugsourceUpgrade gvfs-smb-debuginfoUpgrade evinceUpgrade libxslt-develUpgrade gsettings-desktop-schemas-develUpgrade clutter-tests-debuginfoUpgrade accountsservice-libsUpgrade vinagre-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs52-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-clientUpgrade gvfs-afcUpgrade gvfs-develUpgrade gvfs-afpUpgrade gvfsUpgrade gvfs-archiveUpgrade gvfs-mtpUpgrade gvfs-goaUpgrade gvfs-fuseUpgrade gvfs-smbUpgrade gvfs-gphoto2 | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-clientUpgrade gvfs-mtpUpgrade gvfs-afpUpgrade gvfs-afcUpgrade gvfs-goaUpgrade gvfs-smbUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-develUpgrade gvfs-gphoto2Upgrade gvfs-archive | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade gjsUpgrade clutter-develUpgrade mozjs60-develUpgrade gnome-sessionUpgrade evinceUpgrade gnome-menusUpgrade gnome-session-wayland-sessionUpgrade mutter-develUpgrade gnome-settings-daemonUpgrade gtk3-immodule-ximUpgrade mutterUpgrade accountsserviceUpgrade accountsservice-libsUpgrade gnome-control-center-filesystemUpgrade gnome-session-xsessionUpgrade gtk-update-icon-cacheUpgrade clutterUpgrade gnome-menus-develUpgrade gtk3Upgrade gsettings-desktop-schemas-develUpgrade gnome-boxesUpgrade mozjs60Upgrade libvncserverUpgrade gnome-terminalUpgrade gsettings-desktop-schemasUpgrade gjs-develUpgrade nautilusUpgrade libvncserver-develUpgrade accountsservice-develUpgrade gnome-online-accounts-develUpgrade gnome-shellUpgrade vinagreUpgrade gdmUpgrade evince-libsUpgrade gtk3-develUpgrade LibRaw-develUpgrade libxslt-develUpgrade evince-browser-pluginUpgrade clutter-docUpgrade vala-develUpgrade evince-nautilusUpgrade valaUpgrade gnome-online-accountsUpgrade gnome-tweaksUpgrade gnome-terminal-nautilusUpgrade mozjs52Upgrade nautilus-extensionsUpgrade LibRawUpgrade gnome-software-editorUpgrade gnome-softwareUpgrade gnome-control-centerUpgrade mozjs52-develUpgrade libxsltUpgrade nautilus-develUpgrade gnome-remote-desktopUpgrade appstream-data | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade valaUpgrade nautilus-extensionsUpgrade gvfs-afcUpgrade vala-debuginfoUpgrade gnome-settings-daemonUpgrade gvfs-fuseUpgrade baobab-debuginfoUpgrade libxsltUpgrade gnome-remote-desktop-debugsourceUpgrade LibRaw-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-clientUpgrade gvfs-afp-debuginfoNo solution existsUpgrade accountsservice-libs-debuginfoUpgrade valadoc-debuginfoUpgrade gnome-online-accountsUpgrade gnome-boxes-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gnome-software-debugsourceUpgrade gvfs-afpUpgrade mutter-debuginfoUpgrade LibRaw-debugsourceUpgrade evince-libs-debuginfoUpgrade mutter-tests-debuginfoUpgrade gdm-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-online-accounts-develUpgrade gtk3-immodules-debuginfoUpgrade clutter-docUpgrade gnome-online-accounts-debugsourceUpgrade gnome-menus-debugsourceUpgrade gnome-sessionUpgrade gtk3Upgrade evince-nautilusUpgrade gnome-terminal-nautilus-debuginfoUpgrade gvfsUpgrade gvfs-debuginfoUpgrade accountsservice-develUpgrade gnome-control-center-filesystemUpgrade baobabUpgrade gvfs-archive-debuginfoUpgrade gtk3-debugsourceUpgrade gvfs-archiveUpgrade gnome-control-center-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gtk3-develUpgrade gnome-terminalUpgrade gnome-terminal-debuginfoUpgrade gnome-softwareUpgrade gnome-session-xsessionUpgrade gvfs-develUpgrade mozjs60Upgrade gnome-session-debugsourceUpgrade gvfs-afc-debuginfoUpgrade vinagre-debugsourceUpgrade mozjs52Upgrade gnome-shellUpgrade clutterUpgrade vinagreUpgrade mozjs60-debugsourceUpgrade evince-browser-pluginUpgrade vala-develUpgrade accountsservice-libsUpgrade clutter-debuginfoUpgrade accountsserviceUpgrade gtk-update-icon-cacheUpgrade evince-nautilus-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-menusUpgrade vinagre-debuginfoUpgrade libvncserver-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade mutter-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade accountsservice-debuginfoUpgrade libvncserverUpgrade gtk3-immodule-ximUpgrade vala-debugsourceUpgrade gnome-remote-desktopUpgrade gjs-debugsourceUpgrade gvfs-mtpUpgrade LibRaw-samples-debuginfoUpgrade gjsUpgrade baobab-debugsourceUpgrade gnome-software-debuginfoUpgrade mozjs60-debuginfoUpgrade gvfs-smb-debuginfoUpgrade nautilus-debuginfoUpgrade gvfs-goaUpgrade clutter-develUpgrade appstream-dataUpgrade evince-debugsourceUpgrade clutter-debugsourceUpgrade evince-libsUpgrade mutter-develUpgrade nautilusUpgrade gnome-menus-develUpgrade mozjs60-develUpgrade gvfs-client-debuginfoUpgrade LibRaw-develUpgrade gdmUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gvfs-smbUpgrade gnome-online-accounts-debuginfoUpgrade libxslt-debuginfoUpgrade gnome-shell-debugsourceUpgrade gvfs-gphoto2Upgrade nautilus-extensions-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-boxesUpgrade gnome-tweaksUpgrade gnome-shell-debuginfoUpgrade libvncserver-develUpgrade gnome-software-editorUpgrade gnome-control-center-debugsourceUpgrade gnome-session-debuginfoUpgrade LibRawUpgrade gnome-control-centerUpgrade gsettings-desktop-schemasUpgrade accountsservice-debugsourceUpgrade gjs-tests-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gdm-debugsourceUpgrade nautilus-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade clutter-tests-debuginfoUpgrade gjs-debuginfoUpgrade libxslt-develUpgrade gtk3-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-boxes-debugsourceUpgrade evince-debuginfoUpgrade mutterUpgrade libvncserver-debuginfoUpgrade gnome-menus-debuginfoUpgrade mozjs52-debugsourceUpgrade evinceUpgrade gvfs-goa-debuginfoUpgrade gjs-develUpgrade libxslt-debugsourceUpgrade gnome-terminal-debugsourceUpgrade nautilus-develUpgrade mozjs52-devel | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs60-debuginfoUpgrade mozjs52Upgrade clutter-docUpgrade mozjs60-develUpgrade mozjs52-debuginfoUpgrade baobab-debugsourceUpgrade clutter-debuginfoUpgrade baobabUpgrade gnome-menusUpgrade gnome-menus-debuginfoUpgrade baobab-debuginfoUpgrade mozjs60Upgrade clutterUpgrade mozjs52-devel-debuginfoUpgrade gnome-menus-debugsourceUpgrade mozjs52-debugsourceUpgrade gnome-menus-develUpgrade mozjs60-debugsourceUpgrade clutter-debugsourceUpgrade clutter-develUpgrade mozjs52-devel | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-develUpgrade gvfs-langUpgrade gvfs-backend-afcUpgrade gvfs-backend-sambaUpgrade gvfs-32bitUpgrade gvfs-backendsUpgrade gvfs-fuseUpgrade gvfs | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub