An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade baobabUpgrade accountsservice-develUpgrade vala-develUpgrade clutterUpgrade mozjs52Upgrade clutter-docUpgrade valaUpgrade mozjs60Upgrade gnome-menusUpgrade gnome-tweaksUpgrade mozjs52-develUpgrade mozjs60-develUpgrade clutter-develUpgrade gjs-develUpgrade gnome-menus-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gnome-remote-desktopUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-mtpUpgrade nautilus-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gnome-softwareUpgrade vinagreUpgrade gtk3-develUpgrade LibRaw-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade evince-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-menusUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-online-accounts-develUpgrade vinagre-debuginfoUpgrade evince-nautilusUpgrade gnome-shellUpgrade gvfs-smbUpgrade gvfs-afc-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gdm-debugsourceUpgrade mozjs52Upgrade appstream-dataUpgrade evince-browser-pluginUpgrade libvncserver-debugsourceUpgrade gvfsUpgrade gnome-software-editor-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gvfs-debuginfoUpgrade gvfs-archiveUpgrade mutterUpgrade gnome-shell-debugsourceUpgrade mozjs60-debugsourceUpgrade libvncserver-debuginfoUpgrade gnome-online-accountsUpgrade gvfs-archive-debuginfoUpgrade gjs-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade libxsltUpgrade LibRawUpgrade gvfs-fuseUpgrade gvfs-develUpgrade gnome-software-editorUpgrade gnome-terminalUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gsettings-desktop-schemasUpgrade nautilusUpgrade accountsservice-libs-debuginfoUpgrade nautilus-extensionsUpgrade gvfs-afcUpgrade gnome-sessionUpgrade evince-browser-plugin-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade mozjs60-debuginfoUpgrade gtk3-debuginfoUpgrade libxslt-debugsourceUpgrade gnome-session-debuginfoUpgrade gnome-tweaksUpgrade gvfs-goaUpgrade nautilus-extensions-debuginfoUpgrade gnome-control-centerUpgrade gvfs-fuse-debuginfoUpgrade gnome-control-center-filesystemUpgrade mozjs52-devel-debuginfoUpgrade gvfs-clientUpgrade mozjs60Upgrade accountsservice-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gnome-boxesUpgrade LibRaw-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gjs-debuginfoUpgrade gtk3-tests-debuginfoUpgrade evince-libs-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gtk3-immodule-ximUpgrade evinceUpgrade clutter-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-terminal-debuginfoUpgrade mutter-tests-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-session-debugsourceUpgrade libxslt-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-session-xsessionUpgrade accountsservice-debuginfoUpgrade baobabUpgrade mutter-debugsourceUpgrade clutterUpgrade gdm-debuginfoUpgrade gtk-update-icon-cacheUpgrade clutter-debuginfoUpgrade baobab-debugsourceUpgrade libvncserverUpgrade accountsserviceUpgrade gnome-menus-debugsourceUpgrade accountsservice-libsUpgrade gnome-session-wayland-sessionUpgrade gvfs-client-debuginfoUpgrade gnome-settings-daemonUpgrade gjsUpgrade clutter-tests-debuginfoUpgrade gtk3Upgrade gsettings-desktop-schemas-develUpgrade vinagre-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade mozjs52-debugsourceUpgrade baobab-debuginfoUpgrade evince-libsUpgrade evince-debuginfoUpgrade gnome-software-debugsourceUpgrade mutter-debuginfoUpgrade libxslt-develUpgrade gvfs-afpUpgrade gnome-menus-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gjs-tests-debuginfoUpgrade gdmUpgrade gnome-shell-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade nautilus-debugsourceUpgrade gvfs-gphoto2 | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-goaUpgrade gvfs-fuseUpgrade gvfs-gphoto2Upgrade gvfs-smbUpgrade gvfs-mtpUpgrade gvfs-clientUpgrade gvfsUpgrade gvfs-archiveUpgrade gvfs-afpUpgrade gvfs-develUpgrade gvfs-afc | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-gphoto2Upgrade gvfs-develUpgrade gvfs-goaUpgrade gvfs-archiveUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-smbUpgrade gvfs-afcUpgrade gvfs-mtpUpgrade gvfs-clientUpgrade gvfs-afp | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade accountsservice-libsUpgrade evinceUpgrade gnome-sessionUpgrade mozjs60-develUpgrade gjsUpgrade gnome-boxesUpgrade gnome-settings-daemonUpgrade mutterUpgrade gnome-session-xsessionUpgrade gtk-update-icon-cacheUpgrade clutterUpgrade gtk3-immodule-ximUpgrade gnome-menusUpgrade gnome-control-center-filesystemUpgrade gnome-terminalUpgrade gnome-menus-develUpgrade gsettings-desktop-schemas-develUpgrade mozjs60Upgrade gtk3Upgrade gnome-session-wayland-sessionUpgrade accountsserviceUpgrade libvncserverUpgrade clutter-develUpgrade mutter-develUpgrade gjs-develUpgrade libvncserver-develUpgrade libxsltUpgrade gnome-control-centerUpgrade gsettings-desktop-schemasUpgrade mozjs52-develUpgrade accountsservice-develUpgrade valaUpgrade LibRaw-develUpgrade gtk3-develUpgrade evince-libsUpgrade mozjs52Upgrade nautilus-extensionsUpgrade LibRawUpgrade gnome-softwareUpgrade gnome-software-editorUpgrade libxslt-develUpgrade gnome-online-accountsUpgrade gnome-tweaksUpgrade evince-nautilusUpgrade clutter-docUpgrade vala-develUpgrade evince-browser-pluginUpgrade gnome-terminal-nautilusUpgrade gnome-shellUpgrade nautilusUpgrade nautilus-develUpgrade gnome-remote-desktopUpgrade appstream-dataUpgrade gdmUpgrade vinagreUpgrade gnome-online-accounts-devel | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade vala-develUpgrade accountsservice-develUpgrade baobabUpgrade gvfs-fuseUpgrade evince-browser-plugin-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-terminal-debuginfoUpgrade evince-libs-debuginfoUpgrade libxsltUpgrade gnome-boxes-debuginfoUpgrade gdm-debuginfoUpgrade gnome-session-xsessionUpgrade gtk3-develUpgrade gvfsUpgrade clutterUpgrade gnome-software-editor-debuginfoUpgrade gvfs-archiveUpgrade gvfs-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade mozjs60Upgrade gtk-update-icon-cacheUpgrade gnome-terminalUpgrade evince-nautilusUpgrade clutter-docUpgrade gnome-software-debugsourceUpgrade mutter-tests-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gvfs-afc-debuginfoUpgrade LibRaw-debugsourceUpgrade gvfs-afp-debuginfoUpgrade gnome-settings-daemonUpgrade gtk3Upgrade mozjs52Upgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-online-accounts-develUpgrade gvfs-clientUpgrade gvfs-archive-debuginfoUpgrade baobab-debuginfoUpgrade gnome-sessionUpgrade gvfs-afcUpgrade gnome-control-center-filesystemUpgrade gtk3-devel-debuginfoUpgrade valaUpgrade vinagre-debugsourceUpgrade gnome-menus-debugsourceUpgrade vala-debuginfoUpgrade gnome-online-accountsUpgrade gnome-menusUpgrade gnome-softwareUpgrade valadoc-debuginfoUpgrade accountsserviceUpgrade nautilus-extensionsUpgrade gnome-session-debugsourceUpgrade mutter-debuginfoUpgrade libvncserver-debugsourceUpgrade gvfs-afpNo solution existsUpgrade LibRaw-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gvfs-develUpgrade evince-nautilus-debuginfoUpgrade clutter-debuginfoUpgrade vinagre-debuginfoUpgrade gnome-session-wayland-sessionUpgrade mozjs60-debugsourceUpgrade vinagreUpgrade gnome-shellUpgrade gvfs-fuse-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade accountsservice-libsUpgrade gnome-terminal-nautilusUpgrade evince-browser-pluginUpgrade gvfs-mtp-debuginfoUpgrade gnome-control-centerUpgrade gvfs-smb-debuginfoUpgrade clutter-tests-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-boxes-debugsourceUpgrade mozjs52-debugsourceUpgrade libvncserver-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade vala-debugsourceUpgrade accountsservice-debuginfoUpgrade mutter-debugsourceUpgrade mutterUpgrade baobab-debugsourceUpgrade gsettings-desktop-schemasUpgrade libxslt-develUpgrade gnome-software-debuginfoUpgrade gtk3-debuginfoUpgrade gvfs-goaUpgrade nautilus-debugsourceUpgrade gnome-terminal-debugsourceUpgrade gnome-software-editorUpgrade gjs-debuginfoUpgrade nautilus-debuginfoUpgrade mozjs60-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-remote-desktopUpgrade gvfs-smbUpgrade gvfs-gphoto2-debuginfoUpgrade clutter-develUpgrade evince-debugsourceUpgrade gnome-menus-develUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-client-debuginfoUpgrade mozjs60-develUpgrade evinceUpgrade gsettings-desktop-schemas-develUpgrade libxslt-debuginfoUpgrade evince-libsUpgrade gdmUpgrade gnome-settings-daemon-debugsourceUpgrade gvfs-debugsourceUpgrade LibRaw-develUpgrade libvncserverUpgrade gtk3-immodule-ximUpgrade gjs-debugsourceUpgrade evince-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade mozjs52-develUpgrade gjs-tests-debuginfoUpgrade mozjs52-debuginfoUpgrade gtk3-tests-debuginfoUpgrade accountsservice-debugsourceUpgrade gvfs-goa-debuginfoUpgrade gnome-control-center-debugsourceUpgrade nautilusUpgrade gdm-debugsourceUpgrade gnome-menus-debuginfoUpgrade gnome-session-debuginfoUpgrade LibRawUpgrade libvncserver-develUpgrade gnome-tweaksUpgrade gjs-develUpgrade gjsUpgrade gnome-online-accounts-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade libxslt-debugsourceUpgrade gnome-boxesUpgrade mutter-develUpgrade clutter-debugsourceUpgrade nautilus-develUpgrade appstream-dataUpgrade gvfs-gphoto2Upgrade gvfs-mtpUpgrade gnome-shell-debugsourceUpgrade nautilus-extensions-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade clutter-docUpgrade mozjs60-debuginfoUpgrade baobab-debugsourceUpgrade clutter-debuginfoUpgrade gnome-menusUpgrade baobabUpgrade mozjs52-debuginfoUpgrade gnome-menus-debuginfoUpgrade mozjs52Upgrade mozjs60-develUpgrade baobab-debuginfoUpgrade gnome-menus-develUpgrade gnome-menus-debugsourceUpgrade mozjs52-debugsourceUpgrade mozjs60-debugsourceUpgrade clutterUpgrade mozjs52-develUpgrade mozjs52-devel-debuginfoUpgrade clutter-develUpgrade mozjs60Upgrade clutter-debugsource | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-develUpgrade gvfs-backend-afcUpgrade gvfs-backend-sambaUpgrade gvfs-32bitUpgrade gvfs-backendsUpgrade gvfs-lang | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub