An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mozjs52-develUpgrade gnome-tweaksUpgrade gjs-develUpgrade clutter-develUpgrade gnome-menus-develUpgrade valaUpgrade clutter-docUpgrade accountsservice-develUpgrade baobabUpgrade mozjs60-develUpgrade gnome-menusUpgrade mozjs60Upgrade clutterUpgrade vala-develUpgrade mozjs52 | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade libvncserverUpgrade nautilusUpgrade gnome-control-centerUpgrade gvfs-debugsourceUpgrade gnome-terminal-nautilusUpgrade gnome-remote-desktopUpgrade gvfs-client-debuginfoUpgrade evinceUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gdmUpgrade gdm-debugsourceUpgrade gnome-shellUpgrade mozjs60-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade clutterUpgrade gnome-shell-debugsourceUpgrade gnome-boxesUpgrade gnome-software-debuginfoUpgrade evince-debugsourceUpgrade gjs-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade appstream-dataUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-debuginfoUpgrade mozjs52Upgrade gjs-debugsourceUpgrade baobab-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-software-editorUpgrade gvfs-smbUpgrade gtk3-tests-debuginfoUpgrade gnome-terminal-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade evince-libsUpgrade gtk3-immodule-xim-debuginfoUpgrade mozjs52-debugsourceUpgrade clutter-debugsourceUpgrade libxslt-develUpgrade accountsservice-debuginfoUpgrade LibRawUpgrade gvfs-mtpUpgrade gvfs-smb-debuginfoUpgrade gjs-tests-debuginfoUpgrade libxslt-debugsourceUpgrade libxsltUpgrade gnome-online-accountsUpgrade nautilus-debuginfoUpgrade libvncserver-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gnome-session-debuginfoUpgrade mutter-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gvfs-fuseUpgrade gnome-tweaksUpgrade gvfs-mtp-debuginfoUpgrade gvfs-goaUpgrade gnome-boxes-debugsourceUpgrade mutterUpgrade accountsservice-debugsourceUpgrade gnome-softwareUpgrade gvfs-gphoto2Upgrade gnome-shell-debuginfoUpgrade mozjs52-debuginfoUpgrade gvfs-afc-debuginfoUpgrade vinagreUpgrade gnome-terminalUpgrade gvfs-debuginfoUpgrade evince-nautilus-debuginfoUpgrade evince-nautilusUpgrade gnome-menus-debugsourceUpgrade gvfs-afpUpgrade gnome-settings-daemonUpgrade gvfs-fuse-debuginfoUpgrade evince-libs-debuginfoUpgrade evince-browser-pluginUpgrade gnome-menus-debuginfoUpgrade gdm-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-software-editor-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-terminal-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-sessionUpgrade gvfs-goa-debuginfoUpgrade gvfs-archiveUpgrade baobabUpgrade libxslt-debuginfoUpgrade vinagre-debuginfoUpgrade mutter-tests-debuginfoUpgrade gvfs-develUpgrade nautilus-extensionsUpgrade gnome-control-center-filesystemUpgrade gtk3-debugsourceUpgrade evince-debuginfoUpgrade gvfsUpgrade mozjs60Upgrade gnome-control-center-debuginfoUpgrade gvfs-afcUpgrade gtk3-immodule-ximUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-session-xsessionUpgrade baobab-debuginfoUpgrade vinagre-debugsourceUpgrade gtk3-develUpgrade mutter-debuginfoUpgrade nautilus-debugsourceUpgrade gtk-update-icon-cacheUpgrade gjsUpgrade clutter-debuginfoUpgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade gnome-online-accounts-debugsourceUpgrade accountsservice-libsUpgrade libvncserver-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gvfs-clientUpgrade clutter-tests-debuginfoUpgrade gtk3Upgrade mozjs60-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-menusUpgrade gvfs-afp-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-session-debugsource | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-develUpgrade gvfs-afcUpgrade gvfs-afpUpgrade gvfs-mtpUpgrade gvfs-clientUpgrade gvfs-archiveUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-smbUpgrade gvfs-goaUpgrade gvfs-gphoto2 | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-afcUpgrade gvfs-clientUpgrade gvfs-fuseUpgrade gvfs-smbUpgrade gvfs-goaUpgrade gvfsUpgrade gvfs-develUpgrade gvfs-afpUpgrade gvfs-mtpUpgrade gvfs-gphoto2Upgrade gvfs-archive | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade accountsservice-libsUpgrade mozjs52-develUpgrade gnome-online-accountsUpgrade libvncserver-develUpgrade gjs-develUpgrade gtk3-develUpgrade gnome-boxesUpgrade evince-nautilusUpgrade gsettings-desktop-schemasUpgrade libvncserverUpgrade valaUpgrade vinagreUpgrade gnome-shellUpgrade gjsUpgrade gnome-online-accounts-develUpgrade LibRaw-develUpgrade gnome-menus-develUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-filesystemUpgrade nautilus-extensionsUpgrade nautilusUpgrade gnome-settings-daemonUpgrade gnome-terminal-nautilusUpgrade gnome-remote-desktopUpgrade evince-browser-pluginUpgrade gdmUpgrade LibRawUpgrade accountsserviceUpgrade mozjs60-develUpgrade gnome-tweaksUpgrade libxsltUpgrade gnome-menusUpgrade gnome-session-xsessionUpgrade evince-libsUpgrade evinceUpgrade clutterUpgrade gnome-control-centerUpgrade mozjs52Upgrade mutterUpgrade gnome-terminalUpgrade gtk3-immodule-ximUpgrade libxslt-develUpgrade appstream-dataUpgrade clutter-develUpgrade vala-develUpgrade accountsservice-develUpgrade nautilus-develUpgrade gtk3Upgrade gnome-software-editorUpgrade mozjs60Upgrade gnome-sessionUpgrade gnome-session-wayland-sessionUpgrade gnome-softwareUpgrade gsettings-desktop-schemas-develUpgrade clutter-docUpgrade mutter-devel | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gsettings-desktop-schemasUpgrade mozjs52-devel-debuginfoUpgrade mozjs52-debugsourceUpgrade libxslt-debugsourceUpgrade clutter-docUpgrade gnome-control-center-debuginfoUpgrade gvfs-goa-debuginfoUpgrade evince-libsUpgrade clutterUpgrade LibRaw-debugsourceUpgrade nautilus-debugsourceNo solution existsUpgrade gtk3-immodule-ximUpgrade LibRawUpgrade gvfs-mtp-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-boxesUpgrade gvfs-gphoto2Upgrade gtk3-devel-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade vinagreUpgrade mozjs52Upgrade gnome-software-debugsourceUpgrade evince-libs-debuginfoUpgrade gjs-debuginfoUpgrade gnome-control-centerUpgrade libvncserver-develUpgrade gnome-software-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-shell-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-softwareUpgrade libxsltUpgrade gnome-settings-daemon-debugsourceUpgrade gvfs-smbUpgrade gjs-tests-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade libvncserver-debugsourceUpgrade evince-debugsourceUpgrade gvfs-fuseUpgrade nautilus-extensions-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gnome-sessionUpgrade accountsservice-develUpgrade libxslt-develUpgrade LibRaw-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gjs-debugsourceUpgrade gnome-menus-develUpgrade accountsservice-debuginfoUpgrade gnome-tweaksUpgrade gvfs-client-debuginfoUpgrade gnome-software-editorUpgrade gnome-remote-desktop-debuginfoUpgrade mozjs52-develUpgrade libvncserverUpgrade gsettings-desktop-schemas-develUpgrade evince-nautilusUpgrade clutter-tests-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gvfs-archiveUpgrade gjs-develUpgrade gnome-software-editor-debuginfoUpgrade mozjs60-develUpgrade gvfs-afp-debuginfoUpgrade clutter-develUpgrade mutterUpgrade mozjs60-debuginfoUpgrade evince-debuginfoUpgrade gnome-session-wayland-sessionUpgrade nautilus-develUpgrade appstream-dataUpgrade gdm-debuginfoUpgrade gvfs-goaUpgrade gnome-boxes-debugsourceUpgrade gnome-session-debugsourceUpgrade gvfsUpgrade accountsserviceUpgrade nautilus-extensionsUpgrade gvfs-debuginfoUpgrade gnome-remote-desktopUpgrade gnome-online-accounts-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-menus-debugsourceUpgrade valadoc-debuginfoUpgrade gdmUpgrade vinagre-debuginfoUpgrade baobab-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-session-debuginfoUpgrade gvfs-afcUpgrade gtk3-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-boxes-debuginfoUpgrade valaUpgrade evince-browser-pluginUpgrade gtk3-debuginfoUpgrade gjsUpgrade gtk3-develUpgrade gnome-menusUpgrade baobabUpgrade gnome-control-center-filesystemUpgrade gvfs-clientUpgrade gnome-online-accountsUpgrade gnome-terminal-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gvfs-mtpUpgrade LibRaw-samples-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gdm-debugsourceUpgrade baobab-debugsourceUpgrade vala-debuginfoUpgrade vinagre-debugsourceUpgrade nautilusUpgrade gvfs-afc-debuginfoUpgrade accountsservice-libsUpgrade gnome-menus-debuginfoUpgrade clutter-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade mutter-debugsourceUpgrade gnome-session-xsessionUpgrade gtk3Upgrade gvfs-develUpgrade gnome-shellUpgrade gnome-remote-desktop-debugsourceUpgrade mutter-debuginfoUpgrade LibRaw-develUpgrade libvncserver-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-terminalUpgrade libxslt-debuginfoUpgrade vala-develUpgrade gtk-update-icon-cache-debuginfoUpgrade mozjs60-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-terminal-debuginfoUpgrade gvfs-afpUpgrade evinceUpgrade vala-debugsourceUpgrade clutter-debuginfoUpgrade mozjs60Upgrade gnome-settings-daemonUpgrade mutter-develUpgrade nautilus-debuginfoUpgrade gnome-terminal-nautilusUpgrade gtk3-tests-debuginfoUpgrade gvfs-debugsourceUpgrade gtk3-immodule-xim-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade clutter-develUpgrade clutter-debuginfoUpgrade gnome-menus-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade mozjs52-develUpgrade clutter-debugsourceUpgrade mozjs60-debuginfoUpgrade gnome-menus-develUpgrade mozjs60Upgrade baobab-debuginfoUpgrade gnome-menus-debugsourceUpgrade gnome-menusUpgrade mozjs52Upgrade clutter-docUpgrade mozjs60-debugsourceUpgrade baobabUpgrade mozjs60-develUpgrade clutterUpgrade mozjs52-debuginfoUpgrade baobab-debugsource | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-32bitUpgrade gvfs-develUpgrade gvfs-backendsUpgrade gvfs-backend-sambaUpgrade gvfs-backend-afcUpgrade gvfs-lang | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub