An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mozjs52-develUpgrade valaUpgrade gjs-develUpgrade clutter-develUpgrade gnome-menus-develUpgrade gnome-tweaksUpgrade mozjs60-develUpgrade clutterUpgrade clutter-docUpgrade vala-develUpgrade baobabUpgrade gnome-menusUpgrade accountsservice-develUpgrade mozjs60Upgrade mozjs52 | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gnome-boxes-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gdm-debugsourceUpgrade gnome-tweaksUpgrade gtk3-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-terminal-debugsourceUpgrade mozjs52-debugsourceUpgrade gnome-boxesUpgrade clutterUpgrade libxslt-debugsourceUpgrade accountsservice-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-control-centerUpgrade mozjs52Upgrade gvfs-gphoto2Upgrade mozjs60-debuginfoUpgrade gnome-remote-desktopUpgrade gnome-shell-debugsourceUpgrade gnome-software-debuginfoUpgrade gsettings-desktop-schemasUpgrade mutterUpgrade gvfs-mtpUpgrade gvfs-smb-debuginfoUpgrade libvncserver-debuginfoUpgrade appstream-dataUpgrade evince-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gjs-debuginfoUpgrade gvfs-goaUpgrade gdmUpgrade nautilus-extensions-debuginfoUpgrade evinceUpgrade nautilus-debuginfoUpgrade gvfs-fuseUpgrade gjs-tests-debuginfoUpgrade mozjs52-debuginfoUpgrade gvfs-smbUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-softwareUpgrade libxslt-develUpgrade accountsservice-debuginfoUpgrade evince-libsUpgrade gnome-shellUpgrade gnome-online-accountsUpgrade libxsltUpgrade accountsservice-libs-debuginfoUpgrade gnome-terminal-nautilusUpgrade gtk3-immodule-xim-debuginfoUpgrade LibRawUpgrade gnome-software-editorUpgrade gnome-control-center-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade mutter-debugsourceUpgrade libvncserverUpgrade baobab-debugsourceUpgrade gvfs-client-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gnome-session-debuginfoUpgrade clutter-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gjs-debugsourceUpgrade nautilusUpgrade gvfs-afpUpgrade gnome-terminal-debuginfoUpgrade gvfs-archiveUpgrade gnome-software-debugsourceUpgrade gvfs-afcUpgrade gnome-settings-daemonUpgrade gvfs-archive-debuginfoUpgrade gvfs-clientUpgrade gnome-session-debugsourceUpgrade libvncserver-debugsourceUpgrade evince-libs-debuginfoUpgrade evince-browser-pluginUpgrade gnome-menus-debuginfoUpgrade gdm-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-software-editor-debuginfoUpgrade vinagre-debugsourceUpgrade gnome-session-xsessionUpgrade gjsUpgrade mozjs60-debugsourceUpgrade baobabUpgrade baobab-debuginfoUpgrade vinagre-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gtk3-immodule-ximUpgrade gvfs-goa-debuginfoUpgrade accountsservice-libsUpgrade gtk3-immodules-debuginfoUpgrade gvfs-debuginfoUpgrade gtk3Upgrade gnome-remote-desktop-debugsourceUpgrade libxslt-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-menusUpgrade nautilus-extensionsUpgrade evince-debuginfoUpgrade mutter-debuginfoUpgrade nautilus-debugsourceUpgrade gtk-update-icon-cacheUpgrade gvfs-afp-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-session-wayland-sessionUpgrade accountsserviceUpgrade gtk3-develUpgrade gnome-online-accounts-debugsourceUpgrade gnome-sessionUpgrade vinagreUpgrade gnome-terminal-nautilus-debuginfoUpgrade gtk3-devel-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-control-center-debuginfoUpgrade clutter-tests-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade evince-nautilusUpgrade gvfs-afc-debuginfoUpgrade gvfsUpgrade gnome-online-accounts-develUpgrade mozjs60Upgrade clutter-debuginfoUpgrade evince-nautilus-debuginfoUpgrade LibRaw-debuginfoUpgrade gvfs-develUpgrade gtk3-debugsourceUpgrade gnome-terminalUpgrade gnome-menus-debugsource | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-goaUpgrade gvfs-gphoto2Upgrade gvfs-smbUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-archiveUpgrade gvfs-afpUpgrade gvfs-clientUpgrade gvfs-afcUpgrade gvfs-mtpUpgrade gvfs-devel | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-gphoto2Upgrade gvfs-archiveUpgrade gvfs-mtpUpgrade gvfs-afpUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-develUpgrade gvfs-afcUpgrade gvfs-smbUpgrade gvfs-clientUpgrade gvfs-goa | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade accountsservice-develUpgrade nautilus-develUpgrade gnome-tweaksUpgrade clutterUpgrade mozjs60-develUpgrade gtk3Upgrade mozjs52Upgrade appstream-dataUpgrade gtk3-immodule-ximUpgrade gnome-sessionUpgrade gnome-session-wayland-sessionUpgrade mozjs60Upgrade gnome-session-xsessionUpgrade libxslt-develUpgrade gnome-control-centerUpgrade gnome-terminalUpgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade mutterUpgrade evince-libsUpgrade mutter-develUpgrade gnome-menusUpgrade gnome-software-editorUpgrade vala-develUpgrade libxsltUpgrade gnome-softwareUpgrade clutter-develUpgrade evinceUpgrade LibRawUpgrade clutter-docUpgrade gnome-remote-desktopUpgrade mozjs52-develUpgrade gnome-online-accounts-develUpgrade nautilus-extensionsUpgrade accountsservice-libsUpgrade gnome-online-accountsUpgrade nautilusUpgrade gjsUpgrade gnome-shellUpgrade gtk3-develUpgrade gnome-control-center-filesystemUpgrade valaUpgrade gsettings-desktop-schemasUpgrade libvncserver-develUpgrade gjs-develUpgrade vinagreUpgrade gnome-terminal-nautilusUpgrade libvncserverUpgrade gdmUpgrade gnome-settings-daemonUpgrade LibRaw-develUpgrade gnome-boxesUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade gtk-update-icon-cacheUpgrade gnome-menus-devel | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-session-xsessionUpgrade gnome-menus-debuginfoUpgrade mozjs60Upgrade LibRaw-samples-debuginfoUpgrade accountsservice-libsUpgrade clutter-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gvfs-develUpgrade baobab-debuginfoUpgrade gvfs-debugsourceUpgrade gnome-menus-debugsourceUpgrade gnome-shellUpgrade evince-browser-pluginUpgrade valadoc-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade mutter-debuginfoUpgrade valaUpgrade accountsservice-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gtk3-debugsourceUpgrade vinagre-debuginfoUpgrade gvfs-mtpUpgrade gdm-debugsourceUpgrade mozjs60-debugsourceUpgrade gnome-terminal-debuginfoUpgrade vala-debuginfoUpgrade gtk3Upgrade baobab-debugsourceUpgrade gnome-menusUpgrade gtk-update-icon-cacheUpgrade gnome-terminalUpgrade gnome-settings-daemonUpgrade mutter-debugsourceUpgrade gtk3-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gtk3-develUpgrade gvfs-clientUpgrade gnome-control-center-filesystemUpgrade gtk-update-icon-cache-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade mutter-develUpgrade gvfs-debuginfoUpgrade mozjs52-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-boxes-debuginfoUpgrade baobabUpgrade gnome-online-accountsUpgrade gnome-remote-desktopUpgrade libvncserver-debuginfoUpgrade gnome-terminal-debugsourceUpgrade vinagre-debugsourceUpgrade gnome-session-debuginfoUpgrade gvfs-afcUpgrade vala-develUpgrade gvfs-afpUpgrade clutter-debugsourceUpgrade gvfs-archive-debuginfoUpgrade LibRaw-develUpgrade gjsUpgrade libxslt-debuginfoUpgrade vala-debugsourceUpgrade gdmUpgrade gnome-terminal-nautilusUpgrade evinceUpgrade nautilusUpgrade gsettings-desktop-schemas-develUpgrade gvfs-archiveUpgrade accountsservice-libs-debuginfoUpgrade gnome-control-centerUpgrade gdm-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gjs-tests-debuginfoUpgrade mozjs52-debugsourceUpgrade clutterUpgrade accountsserviceUpgrade gvfs-gphoto2Upgrade libvncserver-debugsourceUpgrade libvncserver-develUpgrade clutter-docUpgrade evince-debugsourceUpgrade gsettings-desktop-schemasUpgrade mozjs52-develUpgrade gtk3-devel-debuginfoUpgrade gvfs-smbUpgrade gnome-control-center-debuginfoUpgrade gnome-menus-develUpgrade gnome-softwareUpgrade gnome-online-accounts-debuginfoUpgrade mutterUpgrade gnome-settings-daemon-debuginfoUpgrade nautilus-extensionsUpgrade gnome-boxes-debugsourceUpgrade vinagreUpgrade gnome-control-center-debugsourceUpgrade LibRaw-debuginfoUpgrade mutter-tests-debuginfoUpgrade gvfs-client-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade LibRawUpgrade gvfs-fuse-debuginfoUpgrade accountsservice-debuginfoUpgrade libxslt-develUpgrade gnome-tweaksUpgrade gtk3-immodule-ximUpgrade gjs-develUpgrade LibRaw-debugsourceUpgrade libvncserverUpgrade gvfsUpgrade evince-libs-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-software-editorUpgrade mozjs52Upgrade libxsltUpgrade gjs-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade libxslt-debugsourceNo solution existsUpgrade gnome-software-debuginfoUpgrade gjs-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-shell-debugsourceUpgrade accountsservice-develUpgrade gvfs-smb-debuginfoUpgrade evince-debuginfoUpgrade gvfs-fuseUpgrade evince-libsUpgrade evince-nautilusUpgrade clutter-tests-debuginfoUpgrade gnome-boxesUpgrade gnome-software-debugsourceUpgrade gvfs-goaUpgrade clutter-develUpgrade gnome-session-wayland-sessionUpgrade gvfs-afp-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade nautilus-develUpgrade gnome-sessionUpgrade appstream-dataUpgrade mozjs60-develUpgrade gvfs-goa-debuginfoUpgrade gnome-shell-debuginfoUpgrade mozjs60-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade clutterUpgrade baobabUpgrade mozjs60-debugsourceUpgrade mozjs60-develUpgrade mozjs60Upgrade clutter-docUpgrade baobab-debuginfoUpgrade gnome-menus-debugsourceUpgrade mozjs52-debuginfoUpgrade baobab-debugsourceUpgrade mozjs52Upgrade gnome-menusUpgrade clutter-develUpgrade clutter-debugsourceUpgrade clutter-debuginfoUpgrade gnome-menus-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade mozjs52-develUpgrade gnome-menus-develUpgrade mozjs60-debuginfo | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-backend-afcUpgrade gvfs-langUpgrade gvfs-backendsUpgrade gvfs-backend-sambaUpgrade gvfs-32bitUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-fuse | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub