An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade clutterUpgrade mozjs60-develUpgrade mozjs52Upgrade gjs-develUpgrade gnome-menusUpgrade clutter-docUpgrade accountsservice-develUpgrade vala-develUpgrade baobabUpgrade valaUpgrade mozjs52-develUpgrade gnome-menus-develUpgrade gnome-tweaksUpgrade clutter-develUpgrade mozjs60 | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gvfs-afp-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade baobab-debugsourceUpgrade gnome-terminalUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-gphoto2Upgrade gsettings-desktop-schemas-develUpgrade gjs-debuginfoUpgrade clutter-tests-debuginfoUpgrade gnome-boxesUpgrade gvfs-mtp-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-debugsourceUpgrade gdmUpgrade mutter-tests-debuginfoUpgrade gnome-control-centerUpgrade gnome-menus-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gvfs-clientUpgrade LibRawUpgrade gnome-settings-daemonUpgrade LibRaw-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-software-debugsourceUpgrade gvfs-goa-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-control-center-filesystemUpgrade libxslt-debuginfoUpgrade gdm-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gjsUpgrade vinagre-debugsourceUpgrade mutterUpgrade mutter-debugsourceUpgrade gtk3-immodule-ximUpgrade gvfs-client-debuginfoUpgrade gnome-session-xsessionUpgrade gvfs-fuse-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-smb-debuginfoUpgrade evinceUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gvfs-archiveUpgrade gvfs-afc-debuginfoUpgrade gnome-control-center-debugsourceUpgrade libxsltUpgrade LibRaw-samples-debuginfoUpgrade gjs-debugsourceUpgrade gtk3Upgrade gnome-menus-debugsourceUpgrade gnome-online-accounts-develUpgrade mutter-debuginfoUpgrade mozjs60Upgrade clutterUpgrade accountsservice-libs-debuginfoUpgrade gvfs-smbUpgrade gnome-menusUpgrade gtk3-immodules-debuginfoUpgrade nautilus-debugsourceUpgrade evince-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade evince-libs-debuginfoUpgrade gtk3-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade accountsserviceUpgrade gnome-terminal-debuginfoUpgrade clutter-debuginfoUpgrade gvfs-afpUpgrade gtk-update-icon-cacheUpgrade mozjs52-debugsourceUpgrade gnome-session-debugsourceUpgrade accountsservice-libsUpgrade gvfs-debugsourceUpgrade mozjs60-debuginfoUpgrade nautilus-extensionsUpgrade LibRaw-debugsourceUpgrade libxslt-debugsourceUpgrade appstream-dataUpgrade nautilus-extensions-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade libvncserverUpgrade gvfsUpgrade evince-libsUpgrade nautilusUpgrade gnome-boxes-debugsourceUpgrade evince-nautilusUpgrade evince-debugsourceUpgrade baobabUpgrade gnome-remote-desktopUpgrade gnome-shell-debugsourceUpgrade gdm-debugsourceUpgrade gvfs-fuseUpgrade clutter-debugsourceUpgrade gvfs-afcUpgrade mozjs52Upgrade gvfs-goaUpgrade gnome-online-accountsUpgrade gnome-terminal-nautilusUpgrade libvncserver-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfoUpgrade evince-browser-pluginUpgrade baobab-debuginfoUpgrade gnome-shellUpgrade gnome-tweaksUpgrade gnome-software-editorUpgrade gnome-control-center-debuginfoUpgrade vinagre-debuginfoUpgrade gtk3-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-softwareUpgrade mozjs60-debugsourceUpgrade gtk3-develUpgrade evince-nautilus-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gvfs-develUpgrade libxslt-develUpgrade vinagreUpgrade gvfs-mtpUpgrade libvncserver-debugsourceUpgrade gvfs-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-sessionUpgrade gsettings-desktop-schemasUpgrade accountsservice-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-smbUpgrade gvfs-gphoto2Upgrade gvfs-archiveUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-afcUpgrade gvfs-develUpgrade gvfs-clientUpgrade gvfs-goaUpgrade gvfs-mtpUpgrade gvfs-afp | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-develUpgrade gvfs-afcUpgrade gvfs-archiveUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-afpUpgrade gvfs-clientUpgrade gvfs-goaUpgrade gvfs-gphoto2Upgrade gvfs-smbUpgrade gvfs-mtp | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade accountsservice-libsUpgrade accountsserviceUpgrade gjsUpgrade gnome-sessionUpgrade gnome-remote-desktopUpgrade nautilus-extensionsUpgrade gnome-online-accounts-develUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-filesystemUpgrade gsettings-desktop-schemas-develUpgrade gnome-terminalUpgrade gtk3-immodule-ximUpgrade gnome-session-xsessionUpgrade gtk3Upgrade gnome-menusUpgrade mozjs60-develUpgrade evince-nautilusUpgrade mozjs60Upgrade gnome-settings-daemonUpgrade gtk-update-icon-cacheUpgrade vala-develUpgrade gnome-terminal-nautilusUpgrade gnome-software-editorUpgrade gnome-shellUpgrade gnome-menus-develUpgrade gsettings-desktop-schemasUpgrade valaUpgrade gnome-control-centerUpgrade LibRawUpgrade nautilus-develUpgrade accountsservice-develUpgrade gjs-develUpgrade gnome-softwareUpgrade vinagreUpgrade nautilusUpgrade appstream-dataUpgrade mozjs52Upgrade mutterUpgrade mozjs52-develUpgrade libvncserver-develUpgrade clutter-develUpgrade gdmUpgrade libxsltUpgrade libvncserverUpgrade gtk3-develUpgrade clutterUpgrade gnome-online-accountsUpgrade gnome-tweaksUpgrade evince-libsUpgrade LibRaw-develUpgrade evince-browser-pluginUpgrade mutter-develUpgrade clutter-docUpgrade gnome-boxesUpgrade evinceUpgrade libxslt-devel | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-shellUpgrade gvfs-archive-debuginfoUpgrade evince-nautilus-debuginfoUpgrade libxsltUpgrade gnome-terminal-debuginfoUpgrade accountsservice-libsUpgrade valadoc-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gtk3-devel-debuginfoUpgrade evince-nautilusUpgrade gnome-control-center-filesystemUpgrade gnome-terminal-nautilus-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade vinagreUpgrade gnome-shell-debuginfoUpgrade mutter-develUpgrade gnome-session-wayland-sessionUpgrade nautilus-debuginfoUpgrade vinagre-debuginfoUpgrade LibRawUpgrade gtk3Upgrade baobab-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gnome-control-center-debuginfoUpgrade accountsserviceUpgrade evince-browser-plugin-debuginfoUpgrade clutterUpgrade gnome-menusUpgrade mozjs52-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-settings-daemonUpgrade gvfs-debuginfoUpgrade nautilusUpgrade gvfs-develUpgrade gdm-debuginfoUpgrade valaUpgrade gdm-debugsourceUpgrade mozjs52Upgrade baobab-debugsourceUpgrade gnome-sessionUpgrade gvfs-afc-debuginfoUpgrade LibRaw-debugsourceUpgrade vala-debuginfoUpgrade gtk3-develUpgrade gnome-terminalUpgrade gnome-online-accountsUpgrade gnome-softwareUpgrade gvfs-clientUpgrade gvfsUpgrade accountsservice-develUpgrade gnome-menus-debugsourceUpgrade gnome-online-accounts-develUpgrade mutter-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gtk3-debugsourceUpgrade libvncserver-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade nautilus-develUpgrade vinagre-debugsourceUpgrade mozjs60Upgrade gnome-settings-daemon-debuginfoUpgrade vala-develUpgrade gvfs-fuseUpgrade evince-debugsourceNo solution existsUpgrade gdmUpgrade baobabUpgrade mozjs60-debugsourceUpgrade nautilus-extensionsUpgrade gvfs-archiveUpgrade evince-browser-pluginUpgrade gvfs-mtpUpgrade clutter-docUpgrade gvfs-gphoto2Upgrade evince-libs-debuginfoUpgrade gnome-session-debugsourceUpgrade LibRaw-develUpgrade evinceUpgrade gnome-remote-desktopUpgrade mutter-tests-debuginfoUpgrade gnome-terminal-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-debugsourceUpgrade gvfs-goa-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade libxslt-debuginfoUpgrade gtk3-debuginfoUpgrade evince-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade vala-debugsourceUpgrade gjsUpgrade gnome-terminal-nautilusUpgrade gnome-boxes-debuginfoUpgrade evince-libsUpgrade mozjs60-develUpgrade appstream-dataUpgrade clutter-debuginfoUpgrade gjs-debuginfoUpgrade gjs-develUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade accountsservice-debuginfoUpgrade gvfs-goaUpgrade gnome-software-debugsourceUpgrade mozjs52-develUpgrade gnome-software-debuginfoUpgrade gnome-boxesUpgrade gjs-debugsourceUpgrade gvfs-client-debuginfoUpgrade gnome-menus-develUpgrade gnome-session-debuginfoUpgrade accountsservice-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade libxslt-develUpgrade gvfs-smb-debuginfoUpgrade gvfs-afcUpgrade gnome-session-xsessionUpgrade gnome-control-centerUpgrade clutter-debugsourceUpgrade gnome-software-editor-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gtk3-tests-debuginfoUpgrade gnome-control-center-debugsourceUpgrade nautilus-debugsourceUpgrade gjs-tests-debuginfoUpgrade libvncserver-develUpgrade gnome-tweaksUpgrade gtk3-immodule-ximUpgrade libvncserverUpgrade gnome-menus-debuginfoUpgrade clutter-develUpgrade gnome-software-editorUpgrade gsettings-desktop-schemasUpgrade libxslt-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade mutterUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-afpUpgrade libvncserver-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade LibRaw-debuginfoUpgrade clutter-tests-debuginfoUpgrade gvfs-smbUpgrade mutter-debugsource | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs52-devel-debuginfoUpgrade clutterUpgrade gnome-menusUpgrade mozjs52-debuginfoUpgrade baobab-debugsourceUpgrade gnome-menus-debuginfoUpgrade mozjs52-debugsourceUpgrade clutter-develUpgrade gnome-menus-debugsourceUpgrade mozjs60-develUpgrade mozjs60Upgrade clutter-debugsourceUpgrade clutter-docUpgrade baobab-debuginfoUpgrade mozjs52-develUpgrade mozjs60-debugsourceUpgrade baobabUpgrade mozjs60-debuginfoUpgrade clutter-debuginfoUpgrade mozjs52Upgrade gnome-menus-devel | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-backendsUpgrade gvfs-backend-sambaUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-backend-afcUpgrade gvfs-develUpgrade gvfs-32bitUpgrade gvfs-lang | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub