An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade clutter-develUpgrade gnome-menus-develUpgrade mozjs52-develUpgrade mozjs60Upgrade valaUpgrade gnome-tweaksUpgrade gnome-menusUpgrade mozjs52Upgrade vala-develUpgrade clutter-docUpgrade baobabUpgrade gjs-develUpgrade accountsservice-develUpgrade clutterUpgrade mozjs60-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gvfs-debugsourceUpgrade libxslt-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-software-editorUpgrade nautilus-extensions-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade libxslt-develUpgrade gtk3-immodule-xim-debuginfoUpgrade libvncserverUpgrade gvfs-develUpgrade appstream-dataUpgrade gnome-softwareUpgrade baobabUpgrade gnome-shell-debugsourceUpgrade gvfs-goaUpgrade mozjs60-debugsourceUpgrade mozjs52Upgrade nautilus-debuginfoUpgrade gnome-sessionUpgrade gvfs-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-control-center-debuginfoUpgrade libvncserver-debuginfoUpgrade gnome-online-accountsUpgrade evince-browser-pluginUpgrade gnome-terminal-nautilusUpgrade gnome-tweaksUpgrade LibRaw-debugsourceUpgrade vinagreUpgrade nautilus-extensionsUpgrade clutter-debugsourceUpgrade gnome-software-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade baobab-debuginfoUpgrade gvfs-fuseUpgrade gdm-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade evince-debugsourceUpgrade gnome-boxes-debugsourceUpgrade gnome-remote-desktopUpgrade evince-nautilusUpgrade vinagre-debuginfoUpgrade gvfsUpgrade evince-libsUpgrade gtk3-develUpgrade gnome-shellUpgrade accountsservice-debuginfoUpgrade nautilusUpgrade gvfs-afcUpgrade gnome-terminal-nautilus-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gvfs-mtpUpgrade gnome-boxes-debuginfoUpgrade libvncserver-debugsourceUpgrade gnome-session-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-terminalUpgrade gtk3-debugsourceUpgrade gvfs-goa-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gtk3Upgrade accountsserviceUpgrade gdm-debuginfoUpgrade evinceUpgrade gnome-control-center-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gvfs-clientUpgrade gvfs-smbUpgrade gnome-menusUpgrade libxsltUpgrade gvfs-gphoto2Upgrade gjs-tests-debuginfoUpgrade gdmUpgrade evince-browser-plugin-debuginfoUpgrade mutter-debuginfoUpgrade gvfs-afp-debuginfoUpgrade nautilus-debugsourceUpgrade clutterUpgrade mutter-debugsourceUpgrade gnome-session-debugsourceUpgrade mozjs52-debugsourceUpgrade gnome-menus-debuginfoUpgrade clutter-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-session-xsessionUpgrade gvfs-client-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-terminal-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade accountsservice-debugsourceUpgrade evince-debuginfoUpgrade gnome-online-accounts-develUpgrade evince-libs-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-menus-debugsourceUpgrade gvfs-archiveUpgrade mozjs60Upgrade gtk-update-icon-cacheUpgrade LibRaw-samples-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-afpUpgrade gjs-debugsourceUpgrade gjsUpgrade gsettings-desktop-schemas-develUpgrade baobab-debugsourceUpgrade clutter-tests-debuginfoUpgrade gjs-debuginfoUpgrade accountsservice-libsUpgrade mutter-tests-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gnome-boxesUpgrade gnome-software-debugsourceUpgrade gnome-control-centerUpgrade gvfs-mtp-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-session-wayland-sessionUpgrade LibRawUpgrade gnome-control-center-filesystemUpgrade gnome-settings-daemon-debugsourceUpgrade mutterUpgrade vinagre-debugsourceUpgrade mozjs52-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade libxslt-debuginfoUpgrade gvfs-fuse-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-mtpUpgrade gvfs-develUpgrade gvfs-clientUpgrade gvfs-afcUpgrade gvfs-goaUpgrade gvfs-afpUpgrade gvfs-gphoto2Upgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-archiveUpgrade gvfs-smb | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-fuseUpgrade gvfs-afcUpgrade gvfs-archiveUpgrade gvfs-develUpgrade gvfs-clientUpgrade gvfsUpgrade gvfs-afpUpgrade gvfs-mtpUpgrade gvfs-goaUpgrade gvfs-gphoto2Upgrade gvfs-smb | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade gtk3Upgrade gnome-menusUpgrade gjsUpgrade gnome-session-wayland-sessionUpgrade vala-develUpgrade gnome-terminalUpgrade accountsserviceUpgrade gnome-sessionUpgrade mozjs60Upgrade evince-nautilusUpgrade gnome-control-center-filesystemUpgrade gtk3-immodule-ximUpgrade gnome-settings-daemonUpgrade gnome-session-xsessionUpgrade accountsservice-libsUpgrade gtk-update-icon-cacheUpgrade gnome-online-accounts-develUpgrade mozjs60-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-remote-desktopUpgrade nautilus-extensionsUpgrade gnome-shellUpgrade appstream-dataUpgrade gnome-softwareUpgrade nautilusUpgrade mozjs52Upgrade mozjs52-develUpgrade evinceUpgrade libxslt-develUpgrade gdmUpgrade clutter-docUpgrade clutter-develUpgrade gnome-control-centerUpgrade LibRawUpgrade libxsltUpgrade nautilus-develUpgrade accountsservice-develUpgrade gnome-tweaksUpgrade valaUpgrade gsettings-desktop-schemasUpgrade libvncserverUpgrade libvncserver-develUpgrade gnome-online-accountsUpgrade gtk3-develUpgrade clutterUpgrade gnome-terminal-nautilusUpgrade evince-browser-pluginUpgrade LibRaw-develUpgrade gjs-develUpgrade gnome-menus-develUpgrade vinagreUpgrade gnome-software-editorUpgrade mutter-develUpgrade gnome-boxesUpgrade evince-libsUpgrade mutter | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-session-debugsourceUpgrade gnome-menus-debugsourceUpgrade gvfs-clientUpgrade gvfs-gphoto2Upgrade clutter-docUpgrade nautilus-extensionsUpgrade libvncserver-debugsourceUpgrade evince-browser-pluginUpgrade nautilus-develUpgrade LibRaw-debugsourceUpgrade mutter-develUpgrade vinagreUpgrade gnome-settings-daemon-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade evince-debugsourceNo solution existsUpgrade libxsltUpgrade accountsservice-develUpgrade gtk3-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-control-center-filesystemUpgrade baobab-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-shellUpgrade gvfs-develUpgrade vala-develUpgrade vinagre-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gnome-softwareUpgrade valadoc-debuginfoUpgrade accountsservice-libsUpgrade gnome-shell-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade evince-libs-debuginfoUpgrade gvfsUpgrade baobabUpgrade nautilusUpgrade mozjs60Upgrade gvfs-afp-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-sessionUpgrade gdm-debugsourceUpgrade gvfs-fuseUpgrade gtk3Upgrade gvfs-archiveUpgrade gdm-debuginfoUpgrade nautilus-debuginfoUpgrade evince-nautilusUpgrade valaUpgrade gtk3-develUpgrade gdmUpgrade gnome-terminal-debuginfoUpgrade gvfs-mtpUpgrade vinagre-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-online-accounts-develUpgrade gvfs-fuse-debuginfoUpgrade baobab-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-terminalUpgrade gvfs-archive-debuginfoUpgrade mozjs52-debuginfoUpgrade LibRawUpgrade gvfs-debuginfoUpgrade mozjs52Upgrade accountsserviceUpgrade gnome-session-wayland-sessionUpgrade clutterUpgrade mutter-debuginfoUpgrade vala-debuginfoUpgrade gvfs-afc-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-online-accountsUpgrade gnome-menusUpgrade gnome-control-center-debuginfoUpgrade gvfs-afcUpgrade gjs-debugsourceUpgrade gsettings-desktop-schemasUpgrade mozjs60-develUpgrade appstream-dataUpgrade libxslt-debugsourceUpgrade LibRaw-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-goaUpgrade mutter-tests-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade clutter-debuginfoUpgrade gnome-remote-desktopUpgrade LibRaw-samples-debuginfoUpgrade mozjs52-debugsourceUpgrade gvfs-smbUpgrade gnome-terminal-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-tweaksUpgrade gvfs-smb-debuginfoUpgrade gjs-develUpgrade gnome-session-xsessionUpgrade gnome-control-centerUpgrade gnome-online-accounts-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade mutter-debugsourceUpgrade gtk3-debuginfoUpgrade vala-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade nautilus-debugsourceUpgrade evinceUpgrade gnome-shell-debugsourceUpgrade libvncserverUpgrade gnome-session-debuginfoUpgrade gnome-software-debuginfoUpgrade mozjs60-debuginfoUpgrade libxslt-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade mozjs52-develUpgrade gnome-boxesUpgrade gvfs-goa-debuginfoUpgrade clutter-develUpgrade gnome-menus-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-menus-develUpgrade gnome-control-center-debugsourceUpgrade gnome-boxes-debugsourceUpgrade gnome-software-editorUpgrade gtk3-tests-debuginfoUpgrade LibRaw-develUpgrade gnome-boxes-debuginfoUpgrade gvfs-afpUpgrade libvncserver-debuginfoUpgrade gjs-tests-debuginfoUpgrade gvfs-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade accountsservice-debugsourceUpgrade gjs-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade libvncserver-develUpgrade mutterUpgrade libxslt-develUpgrade gtk3-immodule-ximUpgrade clutter-tests-debuginfoUpgrade gnome-terminal-nautilusUpgrade clutter-debugsourceUpgrade gvfs-client-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade accountsservice-debuginfoUpgrade evince-debuginfoUpgrade gjsUpgrade evince-libs | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade clutter-debugsourceUpgrade baobab-debuginfoUpgrade mozjs60-debugsourceUpgrade mozjs52Upgrade mozjs52-develUpgrade baobabUpgrade gnome-menus-develUpgrade clutter-docUpgrade mozjs60-debuginfoUpgrade clutter-debuginfoUpgrade gnome-menus-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade mozjs52-debugsourceUpgrade baobab-debugsourceUpgrade clutter-develUpgrade mozjs60-develUpgrade mozjs60Upgrade clutterUpgrade gnome-menus-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-menus | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-32bitUpgrade gvfs-langUpgrade gvfs-backend-sambaUpgrade gvfs-backendsUpgrade gvfs-backend-afcUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-devel | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub