An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade accountsservice-develUpgrade gnome-menusUpgrade mozjs60Upgrade vala-develUpgrade mozjs52Upgrade clutterUpgrade baobabUpgrade mozjs60-develUpgrade clutter-docUpgrade gnome-menus-develUpgrade clutter-develUpgrade valaUpgrade mozjs52-develUpgrade gnome-tweaksUpgrade gjs-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade libxsltUpgrade gjs-debugsourceUpgrade gnome-online-accountsUpgrade gvfs-goaUpgrade gnome-softwareUpgrade gjs-debuginfoUpgrade mozjs52-debugsourceUpgrade nautilus-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-terminal-debugsourceUpgrade accountsservice-debuginfoUpgrade gvfs-mtpUpgrade nautilus-extensions-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade evinceUpgrade gnome-control-center-debugsourceUpgrade gdm-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gvfs-smbUpgrade baobab-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-software-editorUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-terminal-nautilusUpgrade evince-libsUpgrade gtk3-tests-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-remote-desktopUpgrade mutter-debugsourceUpgrade clutter-debugsourceUpgrade gnome-tweaksUpgrade gnome-session-debuginfoUpgrade mozjs60-debuginfoUpgrade libvncserver-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade evince-debugsourceUpgrade gvfs-debugsourceUpgrade gnome-software-debuginfoUpgrade libxslt-develUpgrade gnome-boxes-debugsourceUpgrade gnome-shellUpgrade gnome-boxesUpgrade gvfs-fuseUpgrade gvfs-smb-debuginfoUpgrade gtk3-debuginfoUpgrade nautilusUpgrade mutterUpgrade gjs-tests-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade LibRawUpgrade appstream-dataUpgrade gvfs-gphoto2Upgrade libxslt-debugsourceUpgrade gsettings-desktop-schemasUpgrade libvncserverUpgrade gnome-shell-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gdmUpgrade gnome-shell-debugsourceUpgrade gnome-control-centerUpgrade clutterUpgrade mozjs52Upgrade gvfs-gphoto2-debuginfoUpgrade gnome-boxes-debuginfoUpgrade mutter-tests-debuginfoUpgrade gnome-menus-debugsourceUpgrade gtk3-develUpgrade evince-nautilusUpgrade accountsservice-libsUpgrade gnome-session-debugsourceUpgrade baobabUpgrade clutter-debuginfoUpgrade baobab-debuginfoUpgrade gvfsUpgrade gtk3-immodule-ximUpgrade gnome-session-xsessionUpgrade vinagre-debugsourceUpgrade gnome-software-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gtk3Upgrade gnome-remote-desktop-debugsourceUpgrade gvfs-afcUpgrade gvfs-afc-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gvfs-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade mozjs60-debugsourceUpgrade LibRaw-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-afp-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gjsUpgrade vinagreUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-sessionUpgrade gdm-debuginfoUpgrade evince-libs-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-software-editor-debuginfoUpgrade evince-browser-pluginUpgrade gnome-menus-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-filesystemUpgrade accountsserviceUpgrade gnome-online-accounts-develUpgrade gtk3-debugsourceUpgrade gvfs-clientUpgrade gnome-settings-daemonUpgrade gnome-menusUpgrade libxslt-debuginfoUpgrade mozjs60Upgrade gvfs-develUpgrade nautilus-extensionsUpgrade evince-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gnome-terminalUpgrade vinagre-debuginfoUpgrade gvfs-archiveUpgrade libvncserver-debugsourceUpgrade clutter-tests-debuginfoUpgrade mutter-debuginfoUpgrade nautilus-debugsourceUpgrade gvfs-afp | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-afcUpgrade gvfs-mtpUpgrade gvfs-afpUpgrade gvfs-clientUpgrade gvfs-develUpgrade gvfs-gphoto2Upgrade gvfs-fuseUpgrade gvfs-goaUpgrade gvfsUpgrade gvfs-smbUpgrade gvfs-archive | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfsUpgrade gvfs-smbUpgrade gvfs-afcUpgrade gvfs-goaUpgrade gvfs-clientUpgrade gvfs-develUpgrade gvfs-fuseUpgrade gvfs-gphoto2Upgrade gvfs-mtpUpgrade gvfs-archiveUpgrade gvfs-afp | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade gnome-tweaksUpgrade nautilus-develUpgrade vala-develUpgrade accountsservice-develUpgrade mutter-develUpgrade mozjs52Upgrade gtk3Upgrade mozjs60Upgrade gnome-terminalUpgrade clutter-develUpgrade gnome-softwareUpgrade gnome-menusUpgrade mozjs60-develUpgrade accountsserviceUpgrade evince-libsUpgrade gsettings-desktop-schemas-develUpgrade appstream-dataUpgrade gtk3-immodule-ximUpgrade gnome-session-xsessionUpgrade mutterUpgrade gnome-sessionUpgrade gnome-session-wayland-sessionUpgrade libxslt-develUpgrade LibRawUpgrade gnome-software-editorUpgrade libxsltUpgrade clutterUpgrade evinceUpgrade gnome-control-centerUpgrade clutter-docUpgrade gnome-online-accounts-develUpgrade gnome-boxesUpgrade gnome-terminal-nautilusUpgrade libvncserver-develUpgrade gtk-update-icon-cacheUpgrade gnome-control-center-filesystemUpgrade gdmUpgrade mozjs52-develUpgrade gnome-menus-develUpgrade evince-browser-pluginUpgrade nautilus-extensionsUpgrade gsettings-desktop-schemasUpgrade libvncserverUpgrade gnome-settings-daemonUpgrade evince-nautilusUpgrade LibRaw-develUpgrade vinagreUpgrade gnome-shellUpgrade gjs-develUpgrade valaUpgrade gjsUpgrade gtk3-develUpgrade gnome-online-accountsUpgrade nautilusUpgrade accountsservice-libsUpgrade gnome-remote-desktop | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-online-accountsUpgrade vala-debugsourceUpgrade gnome-boxes-debuginfoUpgrade gvfs-clientUpgrade gnome-menus-debuginfoUpgrade valaUpgrade gnome-remote-desktopUpgrade LibRaw-develUpgrade gtk3-develUpgrade gdmUpgrade nautilus-debuginfoUpgrade gnome-menus-debugsourceUpgrade nautilusUpgrade clutter-debuginfoUpgrade gtk3-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade valadoc-debuginfoUpgrade mutter-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-shellUpgrade gtk3-tests-debuginfoUpgrade mozjs60Upgrade gnome-terminal-nautilus-debuginfoUpgrade baobab-debuginfoUpgrade gvfs-debuginfoUpgrade gvfs-mtpUpgrade gnome-session-xsessionUpgrade evince-nautilus-debuginfoUpgrade gnome-settings-daemonUpgrade gtk3-immodule-xim-debuginfoUpgrade vinagre-debugsourceUpgrade gdm-debugsourceUpgrade mutter-develUpgrade vala-debuginfoUpgrade gvfs-develUpgrade accountsservice-libsUpgrade mutter-debuginfoUpgrade gvfs-afc-debuginfoUpgrade baobab-debugsourceUpgrade gnome-session-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-menusUpgrade mozjs60-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade libvncserver-debuginfoUpgrade gnome-control-center-filesystemUpgrade evince-browser-pluginUpgrade gtk3Upgrade gnome-terminal-nautilusUpgrade gvfs-afpUpgrade gvfs-afcUpgrade gnome-remote-desktop-debugsourceUpgrade mozjs52-debuginfoUpgrade gnome-online-accounts-develUpgrade vinagre-debuginfoUpgrade gvfs-debugsourceUpgrade clutter-debugsourceUpgrade gnome-terminalUpgrade gtk-update-icon-cache-debuginfoUpgrade baobabUpgrade libxslt-debuginfoUpgrade evinceUpgrade vala-develUpgrade gnome-online-accounts-debugsourceUpgrade gnome-terminal-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gjsUpgrade accountsservice-debugsourceUpgrade gvfs-archive-debuginfoUpgrade clutter-docUpgrade gdm-debuginfoUpgrade gvfs-fuseUpgrade gnome-sessionUpgrade gnome-control-center-debuginfoUpgrade gvfs-goa-debuginfoUpgrade evince-libs-debuginfoUpgrade gjs-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-boxesUpgrade gnome-software-debugsourceUpgrade gvfs-gphoto2Upgrade gtk3-devel-debuginfoUpgrade mozjs52-develUpgrade nautilus-extensionsUpgrade gvfs-smbUpgrade gnome-session-debugsourceUpgrade gvfs-smb-debuginfoUpgrade libxslt-develUpgrade vinagreUpgrade mutter-tests-debuginfoUpgrade libxsltUpgrade mozjs52-debugsourceUpgrade libvncserver-develUpgrade gjs-tests-debuginfoUpgrade gnome-menus-develUpgrade gnome-shell-debuginfoUpgrade libxslt-debugsourceUpgrade gnome-control-center-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gnome-software-editorUpgrade gnome-control-centerUpgrade accountsservice-libs-debuginfoUpgrade mozjs60-debuginfoUpgrade evince-debugsourceUpgrade gvfs-goaNo solution existsUpgrade nautilus-develUpgrade clutterUpgrade evince-nautilusUpgrade gvfsUpgrade gjs-debugsourceUpgrade gjs-develUpgrade gnome-online-accounts-debuginfoUpgrade gnome-boxes-debugsourceUpgrade clutter-tests-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade accountsservice-develUpgrade mutterUpgrade gnome-tweaksUpgrade gsettings-desktop-schemasUpgrade gvfs-mtp-debuginfoUpgrade evince-libsUpgrade gvfs-client-debuginfoUpgrade accountsservice-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-software-debuginfoUpgrade libvncserver-debugsourceUpgrade gvfs-archiveUpgrade gnome-softwareUpgrade mozjs52Upgrade gnome-settings-daemon-debuginfoUpgrade appstream-dataUpgrade LibRaw-debugsourceUpgrade nautilus-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade libvncserverUpgrade gtk3-immodule-ximUpgrade LibRawUpgrade accountsserviceUpgrade gnome-software-editor-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade clutter-develUpgrade gnome-session-wayland-sessionUpgrade evince-debuginfoUpgrade gvfs-afp-debuginfoUpgrade mozjs60-devel | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs60-debugsourceUpgrade gnome-menus-debugsourceUpgrade mozjs60-develUpgrade mozjs52-debuginfoUpgrade clutter-docUpgrade baobabUpgrade mozjs60Upgrade baobab-debuginfoUpgrade gnome-menusUpgrade baobab-debugsourceUpgrade mozjs52Upgrade clutterUpgrade mozjs60-debuginfoUpgrade clutter-debuginfoUpgrade clutter-debugsourceUpgrade gnome-menus-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gnome-menus-develUpgrade mozjs52-develUpgrade clutter-devel | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-fuseUpgrade gvfs-develUpgrade gvfs-32bitUpgrade gvfsUpgrade gvfs-backend-sambaUpgrade gvfs-backendsUpgrade gvfs-backend-afcUpgrade gvfs-lang | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub