An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mozjs52Upgrade mozjs60-develUpgrade clutter-docUpgrade accountsservice-develUpgrade baobabUpgrade gjs-develUpgrade clutterUpgrade gnome-menusUpgrade vala-develUpgrade clutter-develUpgrade gnome-menus-develUpgrade valaUpgrade gnome-tweaksUpgrade mozjs52-develUpgrade mozjs60 | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade LibRaw-debuginfoUpgrade baobab-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gvfs-gphoto2Upgrade gnome-shell-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade libxslt-debuginfoUpgrade mozjs52-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gjs-tests-debuginfoUpgrade gdmUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-terminalUpgrade gvfs-afp-debuginfoUpgrade vinagre-debugsourceUpgrade mutterUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gvfs-archive-debuginfoUpgrade mutter-debugsourceUpgrade gtk3-debugsourceUpgrade gnome-terminal-debuginfoUpgrade gtk3Upgrade mozjs60Upgrade LibRaw-samples-debuginfoUpgrade gdm-debuginfoUpgrade clutter-debuginfoUpgrade gnome-control-centerUpgrade gtk-update-icon-cacheUpgrade accountsserviceUpgrade gnome-remote-desktop-debugsourceUpgrade clutterUpgrade gjsUpgrade gnome-online-accounts-develUpgrade libxsltUpgrade mozjs52-debugsourceUpgrade gjs-debugsourceUpgrade evince-libs-debuginfoUpgrade gnome-boxesUpgrade gvfs-archiveUpgrade gtk3-immodules-debuginfoUpgrade gnome-control-center-debugsourceUpgrade mutter-tests-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-menus-debugsourceUpgrade gvfs-afpUpgrade evince-debuginfoUpgrade clutter-tests-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-software-debugsourceUpgrade gvfs-clientUpgrade gnome-session-xsessionUpgrade gtk3-immodule-ximUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gnome-session-debugsourceUpgrade gjs-debuginfoUpgrade evinceUpgrade gvfs-client-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-menusUpgrade gnome-menus-debuginfoUpgrade gvfs-smbUpgrade gvfs-smb-debuginfoUpgrade accountsservice-debugsourceUpgrade mutter-debuginfoUpgrade gvfs-afc-debuginfoUpgrade accountsservice-libsUpgrade gnome-terminal-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-settings-daemonUpgrade LibRawUpgrade gvfs-goa-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gtk3-debuginfoUpgrade gvfs-fuseUpgrade gnome-online-accountsUpgrade nautilus-extensionsUpgrade mozjs60-debugsourceUpgrade clutter-debugsourceUpgrade mozjs52Upgrade gnome-shell-debugsourceUpgrade nautilus-debuginfoUpgrade gnome-softwareUpgrade vinagre-debuginfoUpgrade gnome-sessionUpgrade gtk3-devel-debuginfoUpgrade evince-nautilus-debuginfoUpgrade appstream-dataUpgrade libxslt-develUpgrade gnome-tweaksUpgrade gvfs-mtpUpgrade gnome-software-editorUpgrade gnome-boxes-debuginfoUpgrade gvfs-debuginfoUpgrade accountsservice-debuginfoUpgrade libvncserver-debuginfoUpgrade gnome-terminal-nautilusUpgrade evince-browser-pluginUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfoUpgrade LibRaw-debugsourceUpgrade evince-debugsourceUpgrade gvfs-develUpgrade libvncserver-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade evince-nautilusUpgrade gvfs-debugsourceUpgrade gvfsUpgrade nautilusUpgrade gnome-remote-desktopUpgrade gnome-boxes-debugsourceUpgrade evince-libsUpgrade vinagreUpgrade gvfs-goaUpgrade gtk3-tests-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade libxslt-debugsourceUpgrade mozjs60-debuginfoUpgrade gnome-shellUpgrade gnome-terminal-nautilus-debuginfoUpgrade gvfs-afcUpgrade gnome-session-debuginfoUpgrade gtk3-develUpgrade libvncserverUpgrade baobab-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gsettings-desktop-schemasUpgrade baobabUpgrade gnome-control-center-debuginfoUpgrade gdm-debugsource | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-mtpUpgrade gvfs-afpUpgrade gvfs-develUpgrade gvfs-clientUpgrade gvfs-afcUpgrade gvfs-goaUpgrade gvfs-gphoto2Upgrade gvfs-archiveUpgrade gvfs-fuseUpgrade gvfs-smbUpgrade gvfs | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-gphoto2Upgrade gvfs-mtpUpgrade gvfs-smbUpgrade gvfs-goaUpgrade gvfs-clientUpgrade gvfs-archiveUpgrade gvfs-afcUpgrade gvfs-afpUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-fuse | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade clutterUpgrade gtk3-develUpgrade nautilus-develUpgrade LibRawUpgrade libxsltUpgrade mozjs52Upgrade nautilusUpgrade vinagreUpgrade gnome-softwareUpgrade gnome-online-accountsUpgrade appstream-dataUpgrade libvncserverUpgrade gnome-shellUpgrade accountsservice-develUpgrade libxslt-develUpgrade gdmUpgrade clutter-docUpgrade clutter-develUpgrade mozjs52-develUpgrade gnome-menus-develUpgrade gnome-control-centerUpgrade mutterUpgrade evinceUpgrade gnome-terminal-nautilusUpgrade mutter-develUpgrade gnome-software-editorUpgrade gjs-develUpgrade evince-libsUpgrade evince-browser-pluginUpgrade gnome-tweaksUpgrade valaUpgrade gsettings-desktop-schemasUpgrade gnome-boxesUpgrade LibRaw-develUpgrade libvncserver-develUpgrade vala-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-sessionUpgrade evince-nautilusUpgrade gnome-control-center-filesystemUpgrade gnome-session-wayland-sessionUpgrade gjsUpgrade nautilus-extensionsUpgrade gnome-settings-daemonUpgrade mozjs60-develUpgrade gnome-menusUpgrade accountsserviceUpgrade gtk3Upgrade gnome-remote-desktopUpgrade gnome-online-accounts-develUpgrade accountsservice-libsUpgrade gtk3-immodule-ximUpgrade gnome-session-xsessionUpgrade gnome-terminalUpgrade gtk-update-icon-cacheUpgrade mozjs60 | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-shell-debuginfoUpgrade gnome-menus-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gdmUpgrade mozjs52Upgrade vala-debuginfoUpgrade LibRawUpgrade vinagre-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-debuginfoUpgrade vinagreUpgrade gnome-softwareUpgrade gtk3-devel-debuginfoUpgrade gnome-sessionUpgrade gvfs-fuse-debuginfoUpgrade evince-nautilus-debuginfoUpgrade evince-nautilusUpgrade gnome-terminal-debuginfoNo solution existsUpgrade mozjs60Upgrade mozjs60-debugsourceUpgrade gvfsUpgrade nautilus-debuginfoUpgrade baobab-debuginfoUpgrade gvfs-develUpgrade gvfs-gphoto2Upgrade baobab-debugsourceUpgrade gnome-control-center-filesystemUpgrade nautilus-extensionsUpgrade gvfs-fuseUpgrade gnome-terminalUpgrade mutter-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade evince-libs-debuginfoUpgrade gtk3-develUpgrade gvfs-archiveUpgrade evince-browser-pluginUpgrade clutter-docUpgrade gnome-online-accounts-develUpgrade baobabUpgrade gnome-session-debugsourceUpgrade accountsservice-develUpgrade gtk3Upgrade vinagre-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gdm-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-menusUpgrade mozjs52-debuginfoUpgrade libvncserver-debugsourceUpgrade gdm-debugsourceUpgrade gvfs-clientUpgrade gnome-settings-daemon-debuginfoUpgrade evince-debugsourceUpgrade gnome-online-accountsUpgrade mutter-develUpgrade LibRaw-debugsourceUpgrade clutterUpgrade gnome-settings-daemonUpgrade vala-develUpgrade valadoc-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade valaUpgrade gnome-terminal-nautilus-debuginfoUpgrade gtk-update-icon-cacheUpgrade accountsserviceUpgrade libxsltUpgrade nautilus-develUpgrade gnome-session-wayland-sessionUpgrade nautilusUpgrade gvfs-afp-debuginfoUpgrade gvfs-mtpUpgrade gnome-shellUpgrade accountsservice-libsUpgrade gnome-control-center-debuginfoUpgrade accountsservice-debuginfoUpgrade evince-debuginfoUpgrade gjs-debuginfoUpgrade gnome-software-debugsourceUpgrade LibRaw-develUpgrade vala-debugsourceUpgrade gnome-menus-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gnome-boxes-debuginfoUpgrade clutter-tests-debuginfoUpgrade libxslt-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-boxes-debugsourceUpgrade libxslt-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade mutterUpgrade libvncserver-develUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemon-debugsourceUpgrade libxslt-develUpgrade gnome-shell-debugsourceUpgrade evinceUpgrade gvfs-mtp-debuginfoUpgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemas-develUpgrade gnome-control-center-debugsourceUpgrade gnome-menus-develUpgrade nautilus-debugsourceUpgrade mutter-debugsourceUpgrade gtk3-tests-debuginfoUpgrade LibRaw-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-terminal-nautilusUpgrade gjs-develUpgrade mozjs52-develUpgrade mozjs60-debuginfoUpgrade gvfs-smbUpgrade appstream-dataUpgrade evince-libsUpgrade mozjs60-develUpgrade gjsUpgrade gvfs-smb-debuginfoUpgrade gnome-boxesUpgrade gnome-remote-desktop-debuginfoUpgrade clutter-debugsourceUpgrade gnome-software-editorUpgrade gnome-software-editor-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-tweaksUpgrade gvfs-client-debuginfoUpgrade mutter-tests-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-terminal-debugsourceUpgrade clutter-develUpgrade gvfs-goa-debuginfoUpgrade mozjs52-debugsourceUpgrade gvfs-afcUpgrade LibRaw-samples-debuginfoUpgrade clutter-debuginfoUpgrade gjs-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gvfs-afpUpgrade gvfs-gphoto2-debuginfoUpgrade libvncserverUpgrade libvncserver-debuginfoUpgrade gnome-session-debuginfoUpgrade gvfs-debugsourceUpgrade accountsservice-debugsourceUpgrade gjs-tests-debuginfoUpgrade gnome-software-debuginfoUpgrade gvfs-goaUpgrade gnome-remote-desktopUpgrade gnome-control-center | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade clutterUpgrade mozjs52-debuginfoUpgrade gnome-menus-debuginfoUpgrade gnome-menusUpgrade clutter-develUpgrade mozjs52-debugsourceUpgrade gnome-menus-debugsourceUpgrade mozjs60-develUpgrade mozjs60Upgrade baobab-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade clutter-debugsourceUpgrade clutter-docUpgrade mozjs60-debugsourceUpgrade mozjs52-develUpgrade gnome-menus-develUpgrade mozjs60-debuginfoUpgrade mozjs52Upgrade baobab-debuginfoUpgrade baobabUpgrade clutter-debuginfo | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-develUpgrade gvfs-backendsUpgrade gvfs-backend-sambaUpgrade gvfsUpgrade gvfs-backend-afcUpgrade gvfs-fuseUpgrade gvfs-32bitUpgrade gvfs-lang | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub