An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mozjs52Upgrade baobabUpgrade clutterUpgrade mozjs60-develUpgrade clutter-docUpgrade mozjs60Upgrade gnome-menusUpgrade vala-develUpgrade accountsservice-develUpgrade gnome-menus-develUpgrade valaUpgrade clutter-develUpgrade gnome-tweaksUpgrade gjs-develUpgrade mozjs52-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade gvfsUpgrade gnome-session-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade clutter-tests-debuginfoUpgrade gnome-menus-debugsourceUpgrade gnome-terminalUpgrade vinagre-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade accountsservice-libsUpgrade LibRaw-debugsourceUpgrade gvfs-archiveUpgrade gtk3-immodule-ximUpgrade evince-browser-pluginUpgrade evince-libs-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gdm-debuginfoUpgrade libvncserver-debugsourceUpgrade gnome-menusUpgrade gnome-online-accounts-develUpgrade mutter-debuginfoUpgrade vinagreUpgrade gnome-settings-daemonUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-clientUpgrade gvfs-afp-debuginfoUpgrade mozjs60Upgrade clutter-debuginfoUpgrade libxslt-debuginfoUpgrade gvfs-afpUpgrade evince-nautilusUpgrade gtk-update-icon-cacheUpgrade LibRaw-debuginfoUpgrade gnome-control-center-filesystemUpgrade gvfs-afcUpgrade gvfs-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-menus-debuginfoUpgrade gnome-sessionUpgrade nautilus-extensionsUpgrade baobab-debuginfoUpgrade vinagre-debugsourceUpgrade baobabUpgrade gnome-session-xsessionUpgrade gnome-remote-desktop-debugsourceUpgrade gjsUpgrade accountsserviceUpgrade gtk3-develUpgrade gvfs-develUpgrade mozjs52-devel-debuginfoUpgrade evince-debuginfoUpgrade gnome-software-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gtk3-devel-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gtk3Upgrade gnome-terminal-debuginfoUpgrade gtk3-debugsourceUpgrade mozjs60-debugsourceUpgrade nautilus-debugsourceUpgrade evince-nautilus-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gnome-online-accountsUpgrade accountsservice-debugsourceUpgrade evince-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gvfs-smb-debuginfoUpgrade accountsservice-debuginfoUpgrade gdmUpgrade mutter-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gvfs-mtpUpgrade LibRawUpgrade gnome-softwareUpgrade gnome-control-centerUpgrade libxsltUpgrade nautilus-debuginfoUpgrade mozjs52Upgrade gnome-remote-desktop-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-boxesUpgrade clutterUpgrade appstream-dataUpgrade libxslt-debugsourceUpgrade libvncserver-debuginfoUpgrade gvfs-gphoto2Upgrade gnome-shell-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-remote-desktopUpgrade gnome-software-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gsettings-desktop-schemasUpgrade gvfs-goaUpgrade gnome-terminal-debugsourceUpgrade gdm-debugsourceUpgrade gjs-debuginfoUpgrade mozjs52-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade baobab-debugsourceUpgrade mozjs60-debuginfoUpgrade mutterUpgrade gnome-boxes-debuginfoUpgrade evince-libsUpgrade gvfs-client-debuginfoUpgrade gnome-terminal-nautilusUpgrade libvncserverUpgrade gjs-debugsourceUpgrade gvfs-smbUpgrade gnome-software-editorUpgrade gnome-tweaksUpgrade gvfs-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade nautilusUpgrade gnome-boxes-debugsourceUpgrade gtk3-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-session-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gvfs-fuseUpgrade clutter-debugsourceUpgrade evinceUpgrade libxslt-develUpgrade gnome-shell | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-goaUpgrade gvfs-smbUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-archiveUpgrade gvfs-gphoto2Upgrade gvfs-afcUpgrade gvfs-clientUpgrade gvfs-develUpgrade gvfs-mtpUpgrade gvfs-afp | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-goaUpgrade gvfs-develUpgrade gvfs-afcUpgrade gvfsUpgrade gvfs-clientUpgrade gvfs-smbUpgrade gvfs-fuseUpgrade gvfs-archiveUpgrade gvfs-gphoto2Upgrade gvfs-afpUpgrade gvfs-mtp | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade appstream-dataUpgrade gtk3-immodule-ximUpgrade clutter-docUpgrade libxslt-develUpgrade clutterUpgrade evinceUpgrade mutterUpgrade LibRawUpgrade mozjs60-develUpgrade clutter-develUpgrade gnome-software-editorUpgrade evince-libsUpgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade mozjs52Upgrade gnome-softwareUpgrade libxsltUpgrade gnome-menusUpgrade gnome-sessionUpgrade gnome-session-xsessionUpgrade gnome-tweaksUpgrade gtk3Upgrade gnome-session-wayland-sessionUpgrade accountsservice-develUpgrade mozjs60Upgrade nautilus-develUpgrade gnome-control-centerUpgrade gnome-terminalUpgrade mutter-develUpgrade vala-develUpgrade gnome-settings-daemonUpgrade gnome-shellUpgrade nautilusUpgrade gsettings-desktop-schemasUpgrade gnome-boxesUpgrade gnome-online-accounts-develUpgrade gnome-remote-desktopUpgrade gtk3-develUpgrade libvncserver-develUpgrade valaUpgrade nautilus-extensionsUpgrade gtk-update-icon-cacheUpgrade gjs-develUpgrade gnome-online-accountsUpgrade mozjs52-develUpgrade gjsUpgrade accountsservice-libsUpgrade gnome-control-center-filesystemUpgrade evince-browser-pluginUpgrade gnome-menus-develUpgrade gdmUpgrade gnome-terminal-nautilusUpgrade libvncserverUpgrade LibRaw-develUpgrade evince-nautilusUpgrade vinagre | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade mozjs52-develUpgrade gvfs-fuseUpgrade gjs-debugsourceUpgrade gjs-develUpgrade gsettings-desktop-schemas-develUpgrade mutterUpgrade gvfsUpgrade gvfs-archiveUpgrade gnome-settings-daemon-debuginfoUpgrade libvncserverUpgrade clutter-tests-debuginfoUpgrade gnome-software-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-shell-debugsourceUpgrade accountsservice-develUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade libxsltUpgrade gvfs-goaUpgrade gvfs-gphoto2No solution existsUpgrade clutterUpgrade libxslt-debugsourceUpgrade mozjs52-debugsourceUpgrade evince-debugsourceUpgrade clutter-docUpgrade gnome-software-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-boxesUpgrade mozjs52Upgrade gnome-tweaksUpgrade gjs-debuginfoUpgrade gnome-shell-debuginfoUpgrade mutter-tests-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade LibRaw-debugsourceUpgrade gvfs-smb-debuginfoUpgrade vinagreUpgrade gvfs-smbUpgrade accountsservice-libs-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade libvncserver-develUpgrade nautilus-debugsourceUpgrade gnome-software-editorUpgrade libvncserver-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade evince-libs-debuginfoUpgrade evince-nautilusUpgrade gnome-session-debugsourceUpgrade gnome-sessionUpgrade gnome-menus-develUpgrade evince-libsUpgrade gvfs-afp-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-softwareUpgrade gdm-debuginfoUpgrade nautilus-extensionsUpgrade clutter-develUpgrade gvfs-goa-debuginfoUpgrade accountsserviceUpgrade LibRaw-debuginfoUpgrade gnome-control-centerUpgrade gsettings-desktop-schemasUpgrade gjs-tests-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade nautilus-develUpgrade gvfs-client-debuginfoUpgrade libxslt-develUpgrade gvfs-gphoto2-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-control-center-debuginfoUpgrade evince-debuginfoUpgrade mozjs60-develUpgrade mozjs60-debuginfoUpgrade appstream-dataUpgrade LibRawUpgrade valadoc-debuginfoUpgrade mutter-debuginfoUpgrade baobab-debuginfoUpgrade mozjs60Upgrade LibRaw-samples-debuginfoUpgrade nautilusUpgrade libxslt-debuginfoUpgrade LibRaw-develUpgrade gvfs-mtpUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-shellUpgrade gtk3-debuginfoUpgrade gvfs-debuginfoUpgrade vala-debuginfoUpgrade vala-debugsourceUpgrade gnome-settings-daemonUpgrade evince-nautilus-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-online-accountsUpgrade gtk-update-icon-cacheUpgrade gnome-menus-debuginfoUpgrade mozjs52-debuginfoUpgrade vala-develUpgrade gvfs-clientUpgrade gnome-terminal-debugsourceUpgrade nautilus-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-terminal-nautilusUpgrade libvncserver-debuginfoUpgrade baobabUpgrade gnome-terminalUpgrade gtk3-develUpgrade gnome-menusUpgrade gtk3-tests-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-remote-desktop-debugsourceUpgrade clutter-debuginfoUpgrade gnome-control-center-filesystemUpgrade mutter-debugsourceUpgrade gvfs-afc-debuginfoUpgrade accountsservice-libsUpgrade gtk3-immodules-debuginfoUpgrade mutter-develUpgrade gnome-menus-debugsourceUpgrade evinceUpgrade gvfs-afpUpgrade gdm-debugsourceUpgrade gvfs-debugsourceUpgrade gtk3Upgrade gvfs-develUpgrade baobab-debugsourceUpgrade vinagre-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-online-accounts-develUpgrade gvfs-afcUpgrade evince-browser-plugin-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-boxes-debuginfoUpgrade clutter-debugsourceUpgrade gnome-session-debuginfoUpgrade valaUpgrade gdmUpgrade gvfs-archive-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gnome-remote-desktopUpgrade gtk-update-icon-cache-debuginfoUpgrade gjsUpgrade vinagre-debugsourceUpgrade evince-browser-plugin | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs52-devel-debuginfoUpgrade mozjs52-debugsourceUpgrade gnome-menus-develUpgrade mozjs52-develUpgrade mozjs60-debuginfoUpgrade clutter-debuginfoUpgrade clutter-debugsourceUpgrade clutter-develUpgrade gnome-menus-debuginfoUpgrade mozjs60-debugsourceUpgrade clutterUpgrade mozjs52-debuginfoUpgrade mozjs60-develUpgrade baobabUpgrade baobab-debugsourceUpgrade gnome-menusUpgrade clutter-docUpgrade mozjs60Upgrade baobab-debuginfoUpgrade mozjs52Upgrade gnome-menus-debugsource | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-32bitUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-develUpgrade gvfs-backendsUpgrade gvfs-langUpgrade gvfs-backend-afcUpgrade gvfs-backend-samba | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub