An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-tweaksUpgrade mozjs60Upgrade clutter-develUpgrade valaUpgrade gnome-menus-develUpgrade mozjs52-develUpgrade gnome-menusUpgrade clutterUpgrade vala-develUpgrade baobabUpgrade clutter-docUpgrade accountsservice-develUpgrade gjs-develUpgrade mozjs60-develUpgrade mozjs52 | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade appstream-dataUpgrade evince-nautilusUpgrade nautilus-extensions-debuginfoUpgrade gvfs-goaUpgrade libxslt-debugsourceUpgrade gnome-boxes-debugsourceUpgrade gnome-remote-desktopUpgrade gnome-software-editor-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade nautilusUpgrade evince-libsUpgrade evince-debugsourceUpgrade libvncserver-debuginfoUpgrade gnome-software-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gvfsUpgrade libvncserver-debugsourceUpgrade gnome-software-editorUpgrade gnome-terminal-nautilusUpgrade gtk3-develUpgrade gnome-shellUpgrade gnome-terminal-nautilus-debuginfoUpgrade gvfs-afcUpgrade gdm-debugsourceUpgrade gnome-online-accountsUpgrade vinagreUpgrade gvfs-debugsourceUpgrade gsettings-desktop-schemasUpgrade gtk3-debuginfoUpgrade gnome-boxes-debuginfoUpgrade vinagre-debuginfoUpgrade gnome-softwareUpgrade baobabUpgrade nautilus-extensionsUpgrade baobab-debuginfoUpgrade gvfs-develUpgrade mozjs52Upgrade gnome-sessionUpgrade mozjs60-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gvfs-fuseUpgrade nautilus-debuginfoUpgrade gnome-tweaksUpgrade evince-browser-pluginUpgrade libxslt-develUpgrade gnome-shell-debugsourceUpgrade gvfs-debuginfoUpgrade gtk3-devel-debuginfoUpgrade accountsservice-debuginfoUpgrade libvncserverUpgrade mozjs60-debuginfoUpgrade clutter-debugsourceUpgrade gnome-session-debuginfoUpgrade gnome-control-center-debuginfoUpgrade LibRaw-debugsourceUpgrade gvfs-mtpUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gtk3Upgrade evince-libs-debuginfoUpgrade mozjs60Upgrade gvfs-smbUpgrade mutter-debuginfoUpgrade clutter-debuginfoUpgrade gnome-terminalUpgrade gnome-control-center-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-menus-debugsourceUpgrade gvfs-client-debuginfoUpgrade gjs-debuginfoUpgrade mozjs52-debugsourceUpgrade gvfs-afpUpgrade gtk-update-icon-cacheUpgrade gnome-menus-debuginfoUpgrade gnome-boxesUpgrade clutter-tests-debuginfoUpgrade gnome-control-centerUpgrade mutter-tests-debuginfoUpgrade gnome-session-debugsourceUpgrade accountsservice-libsUpgrade gnome-software-debugsourceUpgrade gjs-debugsourceUpgrade gjsUpgrade gvfs-clientUpgrade LibRawUpgrade gnome-session-xsessionUpgrade gjs-tests-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-online-accounts-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade vinagre-debugsourceUpgrade baobab-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade mutter-debugsourceUpgrade gnome-terminal-debuginfoUpgrade gdm-debuginfoUpgrade gtk3-debugsourceUpgrade accountsserviceUpgrade libxsltUpgrade nautilus-debugsourceUpgrade gnome-menusUpgrade gnome-control-center-filesystemUpgrade gnome-session-wayland-sessionUpgrade libxslt-debuginfoUpgrade evinceUpgrade gdmUpgrade mozjs52-debuginfoUpgrade gvfs-archiveUpgrade accountsservice-libs-debuginfoUpgrade gnome-settings-daemonUpgrade gvfs-afp-debuginfoUpgrade evince-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gvfs-gphoto2Upgrade gnome-settings-daemon-debugsourceUpgrade LibRaw-debuginfoUpgrade gvfs-archive-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade accountsservice-debugsourceUpgrade mutterUpgrade clutterUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-afc-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-smbUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-archiveUpgrade gvfs-gphoto2Upgrade gvfs-clientUpgrade gvfs-develUpgrade gvfs-mtpUpgrade gvfs-afpUpgrade gvfs-goaUpgrade gvfs-afc | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-afcUpgrade gvfsUpgrade gvfs-clientUpgrade gvfs-afpUpgrade gvfs-fuseUpgrade gvfs-archiveUpgrade gvfs-develUpgrade gvfs-goaUpgrade gvfs-gphoto2Upgrade gvfs-smbUpgrade gvfs-mtp | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade gnome-sessionUpgrade nautilus-extensionsUpgrade gnome-session-wayland-sessionUpgrade gjsUpgrade gnome-remote-desktopUpgrade mozjs60-develUpgrade gnome-settings-daemonUpgrade gnome-control-center-filesystemUpgrade gtk3Upgrade gsettings-desktop-schemas-develUpgrade gnome-session-xsessionUpgrade gnome-menusUpgrade accountsserviceUpgrade gnome-terminalUpgrade vala-develUpgrade gnome-online-accounts-develUpgrade accountsservice-libsUpgrade gtk-update-icon-cacheUpgrade mozjs60Upgrade gtk3-immodule-ximUpgrade evince-nautilusUpgrade nautilus-develUpgrade gnome-control-centerUpgrade gnome-tweaksUpgrade clutterUpgrade libxsltUpgrade vinagreUpgrade mutter-develUpgrade mutterUpgrade accountsservice-develUpgrade gnome-online-accountsUpgrade evince-libsUpgrade clutter-develUpgrade clutter-docUpgrade mozjs52-develUpgrade evinceUpgrade gnome-menus-develUpgrade gdmUpgrade libxslt-develUpgrade gsettings-desktop-schemasUpgrade valaUpgrade libvncserverUpgrade gnome-shellUpgrade libvncserver-develUpgrade gnome-software-editorUpgrade gjs-develUpgrade gtk3-develUpgrade LibRawUpgrade mozjs52Upgrade appstream-dataUpgrade nautilusUpgrade gnome-softwareUpgrade gnome-terminal-nautilusUpgrade evince-browser-pluginUpgrade LibRaw-develUpgrade gnome-boxes | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-boxes-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade nautilus-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade evince-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gjs-debugsourceUpgrade LibRaw-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gjsUpgrade gnome-software-editorUpgrade gsettings-desktop-schemasUpgrade gnome-menus-develUpgrade gvfs-smb-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-tweaksUpgrade libxslt-debugsourceUpgrade accountsservice-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gvfs-afcUpgrade accountsservice-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-remote-desktop-debuginfoUpgrade mutterUpgrade mozjs52-develUpgrade gjs-debuginfoUpgrade mozjs60-debuginfoUpgrade gjs-develUpgrade gvfs-mtp-debuginfoUpgrade clutter-develUpgrade gnome-control-centerUpgrade gnome-remote-desktopUpgrade libvncserverUpgrade gvfs-afpUpgrade gnome-online-accounts-debugsourceUpgrade gjs-tests-debuginfoUpgrade gnome-boxesUpgrade gnome-terminal-nautilusUpgrade gnome-menus-debuginfoUpgrade evince-libsUpgrade gvfs-goa-debuginfoUpgrade mozjs60-develUpgrade vala-debugsourceUpgrade libxslt-develUpgrade nautilus-extensions-debuginfoUpgrade mutter-debugsourceUpgrade evinceUpgrade clutter-tests-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-shell-debugsourceUpgrade gvfs-smbUpgrade LibRaw-develUpgrade libxslt-debuginfoUpgrade clutter-debugsourceUpgrade libvncserver-develUpgrade gnome-boxes-debuginfoUpgrade gtk3-immodule-ximUpgrade mozjs52-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gnome-software-debuginfoUpgrade appstream-dataUpgrade gvfs-goaUpgrade gtk3-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-session-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gvfs-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade libvncserver-debuginfoUpgrade mutter-tests-debuginfoUpgrade clutter-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gvfs-develUpgrade gdmUpgrade gtk3Upgrade clutterUpgrade gnome-session-wayland-sessionUpgrade mozjs52-debuginfoUpgrade gvfs-afc-debuginfoUpgrade baobabUpgrade vala-develUpgrade libxsltUpgrade accountsservice-develUpgrade gnome-shellUpgrade evince-nautilus-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade gdm-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade mutter-debuginfoUpgrade gnome-settings-daemonUpgrade gvfs-fuseUpgrade valadoc-debuginfoUpgrade mozjs60Upgrade gnome-remote-desktop-debugsourceUpgrade gvfsUpgrade mozjs60-debugsourceUpgrade gvfs-mtpUpgrade gtk3-immodules-debuginfoUpgrade gdm-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade vinagreUpgrade evince-nautilusUpgrade accountsservice-libsUpgrade LibRaw-debugsourceUpgrade accountsserviceUpgrade gnome-menusUpgrade gnome-terminalUpgrade gnome-online-accountsUpgrade evince-browser-plugin-debuginfoUpgrade LibRawUpgrade gvfs-archive-debuginfoUpgrade gvfs-debuginfoUpgrade gtk-update-icon-cacheUpgrade vala-debuginfoUpgrade baobab-debuginfoUpgrade gnome-softwareUpgrade gtk3-devel-debuginfoUpgrade gnome-sessionUpgrade nautilus-debuginfoUpgrade gnome-menus-debugsourceUpgrade baobab-debugsourceUpgrade valaUpgrade vinagre-debuginfoNo solution existsUpgrade mutter-develUpgrade evince-debugsourceUpgrade evince-libs-debuginfoUpgrade vinagre-debugsourceUpgrade gvfs-archiveUpgrade nautilus-develUpgrade libvncserver-debugsourceUpgrade nautilus-extensionsUpgrade clutter-docUpgrade evince-browser-pluginUpgrade gvfs-gphoto2Upgrade gnome-control-center-filesystemUpgrade accountsservice-libs-debuginfoUpgrade gtk3-develUpgrade gnome-session-debugsourceUpgrade gvfs-afp-debuginfoUpgrade nautilusUpgrade gnome-shell-debuginfoUpgrade mozjs52Upgrade gnome-online-accounts-develUpgrade gvfs-clientUpgrade gnome-control-center-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs60Upgrade mozjs60-develUpgrade gnome-menus-debugsourceUpgrade mozjs52-debugsourceUpgrade clutterUpgrade gnome-menusUpgrade clutter-develUpgrade mozjs52-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade baobab-debugsourceUpgrade gnome-menus-debuginfoUpgrade gnome-menus-develUpgrade baobabUpgrade baobab-debuginfoUpgrade mozjs52-develUpgrade mozjs60-debuginfoUpgrade mozjs52Upgrade clutter-debuginfoUpgrade clutter-debugsourceUpgrade clutter-docUpgrade mozjs60-debugsource | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-32bitUpgrade gvfs-langUpgrade gvfs-backendsUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-backend-sambaUpgrade gvfs-develUpgrade gvfs-backend-afc | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub