An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade accountsservice-develUpgrade gnome-menusUpgrade clutter-docUpgrade mozjs60-develUpgrade clutterUpgrade gjs-develUpgrade vala-develUpgrade mozjs52Upgrade baobabUpgrade mozjs60Upgrade valaUpgrade gnome-menus-develUpgrade gnome-tweaksUpgrade mozjs52-develUpgrade clutter-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade evince-libsUpgrade gnome-session-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade libxslt-develUpgrade gvfs-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gvfs-goaUpgrade gnome-software-editor-debuginfoUpgrade mozjs52Upgrade libxslt-debugsourceUpgrade appstream-dataUpgrade gtk3-immodule-xim-debuginfoUpgrade clutter-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-shell-debugsourceUpgrade mozjs60-debuginfoUpgrade gnome-online-accountsUpgrade gsettings-desktop-schemasUpgrade vinagre-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-shellUpgrade gnome-control-center-debuginfoUpgrade gdm-debugsourceUpgrade nautilus-debuginfoUpgrade gvfs-fuseUpgrade gnome-softwareUpgrade libvncserver-debugsourceUpgrade gnome-tweaksUpgrade gtk3-devel-debuginfoUpgrade gnome-sessionUpgrade gvfs-gphoto2-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gvfsUpgrade gvfs-mtpUpgrade gvfs-develUpgrade gnome-software-editorUpgrade baobab-debuginfoUpgrade vinagreUpgrade evince-nautilusUpgrade gnome-boxes-debuginfoUpgrade nautilusUpgrade evince-debugsourceUpgrade gvfs-afcUpgrade nautilus-extensions-debuginfoUpgrade gnome-remote-desktopUpgrade gtk-update-icon-cache-debuginfoUpgrade libvncserver-debuginfoUpgrade gvfs-debugsourceUpgrade gtk3-develUpgrade gnome-terminal-nautilusUpgrade baobabUpgrade nautilus-extensionsUpgrade evince-browser-pluginUpgrade LibRaw-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-boxes-debugsourceUpgrade libvncserverUpgrade gtk3-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gvfs-clientUpgrade clutter-tests-debuginfoUpgrade gnome-menus-debuginfoUpgrade gvfs-afc-debuginfoUpgrade libxsltUpgrade mutterUpgrade LibRaw-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-goa-debuginfoUpgrade clutterUpgrade gnome-session-xsessionUpgrade gvfs-client-debuginfoUpgrade gvfs-gphoto2Upgrade gvfs-smb-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade baobab-debugsourceUpgrade accountsservice-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gdmUpgrade gjs-tests-debuginfoUpgrade gtk3Upgrade gvfs-afpUpgrade accountsserviceUpgrade gnome-terminal-debuginfoUpgrade gjs-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade gjsUpgrade evince-debuginfoUpgrade gnome-control-center-debugsourceUpgrade mozjs60Upgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemas-develUpgrade evinceUpgrade gvfs-afp-debuginfoUpgrade gnome-terminalUpgrade clutter-debuginfoUpgrade mutter-debugsourceUpgrade gdm-debuginfoUpgrade evince-libs-debuginfoUpgrade gvfs-smbUpgrade gnome-online-accounts-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-control-centerUpgrade gvfs-archiveUpgrade gjs-debuginfoUpgrade gnome-boxesUpgrade mozjs52-devel-debuginfoUpgrade gnome-menus-debugsourceUpgrade accountsservice-libsUpgrade gnome-terminal-debugsourceUpgrade mozjs52-debugsourceUpgrade gnome-session-debugsourceUpgrade mutter-tests-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-settings-daemonUpgrade gvfs-mtp-debuginfoUpgrade libxslt-debuginfoUpgrade vinagre-debugsourceUpgrade mozjs52-debuginfoUpgrade gnome-shell-debuginfoUpgrade LibRawUpgrade gnome-session-wayland-sessionUpgrade accountsservice-libs-debuginfoUpgrade mutter-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gnome-menusUpgrade gnome-control-center-filesystemUpgrade nautilus-debugsource | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-afcUpgrade gvfs-clientUpgrade gvfs-develUpgrade gvfs-goaUpgrade gvfs-afpUpgrade gvfs-mtpUpgrade gvfs-fuseUpgrade gvfs-smbUpgrade gvfs-gphoto2Upgrade gvfs-archiveUpgrade gvfs | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-afpUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-afcUpgrade gvfs-archiveUpgrade gvfs-clientUpgrade gvfs-fuseUpgrade gvfs-goaUpgrade gvfs-gphoto2Upgrade gvfs-smbUpgrade gvfs-mtp | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade mozjs60-develUpgrade gtk3Upgrade accountsservice-libsUpgrade gnome-sessionUpgrade accountsserviceUpgrade gnome-online-accounts-develUpgrade gnome-session-xsessionUpgrade nautilus-extensionsUpgrade gnome-terminalUpgrade gsettings-desktop-schemas-develUpgrade gnome-remote-desktopUpgrade gtk3-immodule-ximUpgrade mozjs60Upgrade gnome-session-wayland-sessionUpgrade gnome-menusUpgrade gnome-settings-daemonUpgrade evince-nautilusUpgrade gtk-update-icon-cacheUpgrade gjsUpgrade gnome-control-center-filesystemUpgrade vala-develUpgrade gnome-software-editorUpgrade nautilus-develUpgrade gnome-boxesUpgrade evince-libsUpgrade mutterUpgrade LibRawUpgrade libxsltUpgrade gtk3-develUpgrade libvncserverUpgrade gnome-online-accountsUpgrade clutterUpgrade valaUpgrade evince-browser-pluginUpgrade gsettings-desktop-schemasUpgrade accountsservice-develUpgrade gnome-menus-develUpgrade gjs-develUpgrade LibRaw-develUpgrade libvncserver-develUpgrade gnome-terminal-nautilusUpgrade mutter-develUpgrade libxslt-develUpgrade clutter-docUpgrade mozjs52-develUpgrade gdmUpgrade evinceUpgrade clutter-develUpgrade vinagreUpgrade gnome-softwareUpgrade nautilusUpgrade mozjs52Upgrade appstream-dataUpgrade gnome-tweaksUpgrade gnome-control-centerUpgrade gnome-shell | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-control-center-filesystemUpgrade nautilus-develUpgrade gtk3-develUpgrade accountsservice-libsUpgrade vinagreUpgrade accountsserviceUpgrade mutter-develUpgrade gnome-menus-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-softwareUpgrade libxsltUpgrade gtk3-devel-debuginfoUpgrade valaUpgrade gvfs-afp-debuginfoUpgrade nautilusUpgrade gdmUpgrade gtk3Upgrade gnome-settings-daemon-debuginfoUpgrade baobab-debugsourceUpgrade gnome-sessionUpgrade gtk-update-icon-cacheUpgrade gvfs-fuse-debuginfoUpgrade gnome-settings-daemonUpgrade evince-browser-plugin-debuginfoUpgrade valadoc-debuginfoUpgrade evince-nautilus-debuginfoUpgrade mozjs60-debugsourceUpgrade gvfs-fuseUpgrade accountsservice-develUpgrade gdm-debuginfoUpgrade gvfsUpgrade gdm-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-terminal-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-terminalUpgrade gnome-online-accounts-develUpgrade clutterUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-shellUpgrade gnome-menusUpgrade gnome-shell-debuginfoUpgrade evince-nautilusUpgrade gvfs-clientUpgrade gnome-remote-desktop-debugsourceUpgrade vala-develUpgrade libvncserver-debugsourceUpgrade clutter-docNo solution existsUpgrade baobabUpgrade gvfs-mtpUpgrade gvfs-gphoto2Upgrade gvfs-archiveUpgrade gvfs-archive-debuginfoUpgrade gtk3-debugsourceUpgrade LibRaw-debugsourceUpgrade mozjs60Upgrade evince-libs-debuginfoUpgrade gnome-online-accountsUpgrade nautilus-extensionsUpgrade vinagre-debuginfoUpgrade vinagre-debugsourceUpgrade LibRawUpgrade baobab-debuginfoUpgrade mozjs52-debuginfoUpgrade nautilus-debuginfoUpgrade evince-browser-pluginUpgrade gnome-session-wayland-sessionUpgrade evince-debugsourceUpgrade gvfs-develUpgrade gvfs-afc-debuginfoUpgrade mutter-debuginfoUpgrade gvfs-debuginfoUpgrade mozjs52Upgrade vala-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-software-editorUpgrade gnome-software-editor-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade evinceUpgrade libxslt-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade mozjs52-debugsourceUpgrade mutter-tests-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gvfs-smbUpgrade gnome-tweaksUpgrade gjs-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade mozjs60-debuginfoUpgrade accountsservice-debuginfoUpgrade gtk3-debuginfoUpgrade gjs-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gvfs-goaUpgrade gvfs-afcUpgrade vala-debugsourceUpgrade nautilus-debugsourceUpgrade gjs-develUpgrade evince-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gvfs-goa-debuginfoUpgrade gnome-boxesUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-shell-debugsourceUpgrade mutter-debugsourceUpgrade gtk3-immodule-ximUpgrade clutter-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gvfs-afpUpgrade gvfs-debugsourceUpgrade gjs-tests-debuginfoUpgrade gnome-menus-develUpgrade LibRaw-develUpgrade gnome-terminal-debugsourceUpgrade clutter-debuginfoUpgrade mozjs52-develUpgrade clutter-develUpgrade mozjs60-develUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-boxes-debuginfoUpgrade clutter-tests-debuginfoUpgrade appstream-dataUpgrade evince-libsUpgrade accountsservice-debugsourceUpgrade gnome-menus-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gjsUpgrade gnome-remote-desktopUpgrade gnome-terminal-nautilusUpgrade gvfs-mtp-debuginfoUpgrade gnome-control-centerUpgrade LibRaw-debuginfoUpgrade mutterUpgrade gnome-settings-daemon-debugsourceUpgrade libxslt-debugsourceUpgrade libxslt-develUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-debuginfoUpgrade libvncserver-develUpgrade gnome-session-xsessionUpgrade gnome-session-debuginfoUpgrade libvncserverUpgrade libvncserver-debuginfoUpgrade gnome-software-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade clutter-develUpgrade mozjs52-debuginfoUpgrade clutterUpgrade mozjs52-debugsourceUpgrade mozjs60Upgrade baobab-debugsourceUpgrade mozjs60-develUpgrade gnome-menus-debugsourceUpgrade gnome-menus-debuginfoUpgrade gnome-menusUpgrade mozjs52-devel-debuginfoUpgrade clutter-debugsourceUpgrade clutter-debuginfoUpgrade gnome-menus-develUpgrade mozjs52-develUpgrade mozjs52Upgrade baobab-debuginfoUpgrade baobabUpgrade mozjs60-debuginfoUpgrade clutter-docUpgrade mozjs60-debugsource | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-langUpgrade gvfs-32bitUpgrade gvfs-backend-sambaUpgrade gvfs-backendsUpgrade gvfs-backend-afcUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-fuse | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub