An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-menus-develUpgrade gjs-develUpgrade clutter-develUpgrade valaUpgrade mozjs52-develUpgrade gnome-tweaksUpgrade accountsservice-develUpgrade baobabUpgrade vala-develUpgrade mozjs52Upgrade mozjs60Upgrade clutterUpgrade mozjs60-develUpgrade clutter-docUpgrade gnome-menus | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade evince-debugsourceUpgrade mozjs60-debuginfoUpgrade gnome-tweaksUpgrade gnome-software-editorUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-boxes-debugsourceUpgrade mutterUpgrade gtk3-tests-debuginfoUpgrade appstream-dataUpgrade gnome-boxesUpgrade gnome-control-centerUpgrade gnome-terminal-nautilusUpgrade libvncserverUpgrade nautilusUpgrade gjs-tests-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-session-debuginfoUpgrade gdm-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-shell-debugsourceUpgrade gnome-terminal-debugsourceUpgrade gnome-boxes-debuginfoUpgrade gjs-debugsourceUpgrade gvfs-debugsourceUpgrade gtk3-debuginfoUpgrade libvncserver-debuginfoUpgrade gvfs-smbUpgrade gvfs-mtp-debuginfoUpgrade gvfs-goaUpgrade libxslt-develUpgrade gvfs-gphoto2Upgrade evinceUpgrade gdmUpgrade gtk-update-icon-cache-debuginfoUpgrade libxslt-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gvfs-fuseUpgrade gnome-shellUpgrade gvfs-mtpUpgrade accountsservice-debuginfoUpgrade gvfs-smb-debuginfoUpgrade mutter-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-control-center-debugsourceUpgrade LibRawUpgrade clutter-debugsourceUpgrade gvfs-client-debuginfoUpgrade gnome-software-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs52Upgrade gjs-debuginfoUpgrade baobab-debugsourceUpgrade evince-libsUpgrade gnome-remote-desktopUpgrade gnome-shell-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-online-accountsUpgrade clutterUpgrade mozjs52-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-softwareUpgrade libxsltUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-menusUpgrade gnome-software-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-terminal-debuginfoUpgrade nautilus-debugsourceUpgrade LibRaw-debuginfoUpgrade clutter-debuginfoUpgrade mutter-tests-debuginfoUpgrade gvfs-clientUpgrade evince-nautilus-debuginfoUpgrade baobab-debuginfoUpgrade vinagre-debuginfoUpgrade libvncserver-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gtk3-immodule-ximUpgrade gvfs-archiveUpgrade gnome-terminalUpgrade gnome-session-debugsourceUpgrade accountsservice-libsUpgrade gnome-menus-debugsourceUpgrade clutter-tests-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gvfs-afcUpgrade gvfs-debuginfoUpgrade gtk3Upgrade gsettings-desktop-schemas-develUpgrade baobabUpgrade gnome-session-xsessionUpgrade mozjs60-debugsourceUpgrade evince-nautilusUpgrade mutter-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gdm-debuginfoUpgrade evince-libs-debuginfoUpgrade evince-browser-pluginUpgrade LibRaw-debugsourceUpgrade gnome-menus-debuginfoUpgrade gtk3-develUpgrade vinagre-debugsourceUpgrade libxslt-debuginfoUpgrade vinagreUpgrade gtk-update-icon-cacheUpgrade gnome-online-accounts-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-control-center-debuginfoUpgrade accountsserviceUpgrade gtk3-debugsourceUpgrade evince-debuginfoUpgrade gvfs-develUpgrade nautilus-extensionsUpgrade gvfsUpgrade gnome-control-center-filesystemUpgrade mozjs60Upgrade gnome-online-accounts-develUpgrade gvfs-afp-debuginfoUpgrade gvfs-afpUpgrade gnome-session-wayland-sessionUpgrade gjsUpgrade gtk3-immodules-debuginfoUpgrade gnome-sessionUpgrade gvfs-archive-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gvfs-goa-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-afcUpgrade gvfs-clientUpgrade gvfs-develUpgrade gvfs-mtpUpgrade gvfs-afpUpgrade gvfs-fuseUpgrade gvfsUpgrade gvfs-smbUpgrade gvfs-gphoto2Upgrade gvfs-goaUpgrade gvfs-archive | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-archiveUpgrade gvfs-mtpUpgrade gvfs-gphoto2Upgrade gvfs-afpUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-afcUpgrade gvfs-smbUpgrade gvfs-fuseUpgrade gvfs-clientUpgrade gvfs-goa | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade libvncserver-develUpgrade gnome-terminal-nautilusUpgrade evince-nautilusUpgrade LibRaw-develUpgrade gdmUpgrade gnome-settings-daemonUpgrade gsettings-desktop-schemasUpgrade vinagreUpgrade libvncserverUpgrade gnome-remote-desktopUpgrade evince-browser-pluginUpgrade mozjs52-develUpgrade gnome-online-accounts-develUpgrade gjsUpgrade accountsservice-libsUpgrade gnome-online-accountsUpgrade gnome-menus-develUpgrade gnome-shellUpgrade gtk-update-icon-cacheUpgrade valaUpgrade nautilusUpgrade gnome-control-center-filesystemUpgrade gjs-develUpgrade nautilus-extensionsUpgrade gnome-boxesUpgrade gtk3-develUpgrade mozjs60Upgrade accountsserviceUpgrade accountsservice-develUpgrade gnome-sessionUpgrade gnome-control-centerUpgrade mutterUpgrade evince-libsUpgrade LibRawUpgrade gnome-session-xsessionUpgrade gtk3Upgrade gnome-terminalUpgrade gsettings-desktop-schemas-develUpgrade gnome-menusUpgrade gtk3-immodule-ximUpgrade libxslt-develUpgrade clutterUpgrade appstream-dataUpgrade clutter-docUpgrade evinceUpgrade mozjs52Upgrade gnome-tweaksUpgrade nautilus-develUpgrade vala-develUpgrade mutter-develUpgrade clutter-develUpgrade libxsltUpgrade gnome-software-editorUpgrade gnome-session-wayland-sessionUpgrade mozjs60-develUpgrade gnome-software | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade gnome-control-center-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-softwareUpgrade evince-libsUpgrade libvncserverUpgrade gjs-debuginfoUpgrade gnome-boxesUpgrade gtk3-devel-debuginfoUpgrade gvfs-smb-debuginfoUpgrade LibRaw-debuginfoUpgrade LibRaw-debugsourceUpgrade mozjs52Upgrade gnome-shell-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade clutter-docUpgrade gtk3-immodule-ximUpgrade gnome-control-centerUpgrade LibRawUpgrade gnome-session-debugsourceUpgrade vinagreUpgrade clutterUpgrade libxslt-develUpgrade mutter-tests-debuginfoUpgrade libxsltUpgrade mozjs52-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-shell-debugsourceUpgrade mozjs60-develUpgrade gnome-menus-develUpgrade mozjs60-debuginfoNo solution existsUpgrade gjs-tests-debuginfoUpgrade gnome-sessionUpgrade nautilus-develUpgrade gnome-software-debugsourceUpgrade appstream-dataUpgrade clutter-develUpgrade libvncserver-develUpgrade gvfs-client-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gdm-debuginfoUpgrade gnome-control-center-debuginfoUpgrade evince-debuginfoUpgrade gvfs-goaUpgrade accountsserviceUpgrade gnome-session-wayland-sessionUpgrade gnome-software-editor-debuginfoUpgrade libvncserver-debugsourceUpgrade evince-libs-debuginfoUpgrade gvfs-afp-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade nautilus-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade libxslt-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gjs-debugsourceUpgrade gjs-develUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-smbUpgrade evince-debugsourceUpgrade gnome-software-editorUpgrade gvfs-archiveUpgrade gnome-settings-daemon-debuginfoUpgrade mutterUpgrade gsettings-desktop-schemas-develUpgrade gnome-boxes-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-develUpgrade clutter-tests-debuginfoUpgrade mozjs52-develUpgrade gvfs-gphoto2Upgrade nautilus-extensions-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-tweaksUpgrade evince-nautilusUpgrade gvfs-goa-debuginfoUpgrade nautilus-extensionsUpgrade gtk3-tests-debuginfoUpgrade gtk3-debuginfoUpgrade gvfs-archive-debuginfoUpgrade clutter-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gjsUpgrade evince-browser-pluginUpgrade vala-debugsourceUpgrade gnome-menusUpgrade mozjs60-debugsourceUpgrade accountsservice-debugsourceUpgrade gdmUpgrade gtk3Upgrade clutter-debugsourceUpgrade gnome-online-accountsUpgrade gtk-update-icon-cacheUpgrade mozjs52-debuginfoUpgrade baobabUpgrade vinagre-debugsourceUpgrade libvncserver-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade vala-develUpgrade gvfs-clientUpgrade gnome-terminalUpgrade gdm-debugsourceUpgrade baobab-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-control-center-filesystemUpgrade nautilus-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade evinceUpgrade gnome-terminal-nautilusUpgrade gnome-menus-debugsourceUpgrade mutter-develUpgrade gvfs-debugsourceUpgrade gvfs-afpUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-settings-daemonUpgrade vala-debuginfoUpgrade accountsservice-libsUpgrade vinagre-debuginfoUpgrade baobab-debugsourceUpgrade gnome-session-xsessionUpgrade gvfs-afc-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-shellUpgrade gnome-menus-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade evince-nautilus-debuginfoUpgrade mutter-debugsourceUpgrade gvfs-mtpUpgrade LibRaw-samples-debuginfoUpgrade LibRaw-develUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-remote-desktopUpgrade gtk3-develUpgrade nautilusUpgrade mutter-debuginfoUpgrade gnome-session-debuginfoUpgrade valadoc-debuginfoUpgrade gnome-boxes-debuginfoUpgrade valaUpgrade gvfs-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-online-accounts-develUpgrade gvfs-develUpgrade gvfs-afcUpgrade mozjs60Upgrade libxslt-debuginfoUpgrade gnome-terminal-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs52-debugsourceUpgrade clutter-debuginfoUpgrade gnome-menus-develUpgrade clutter-debugsourceUpgrade mozjs52-develUpgrade mozjs60-debuginfoUpgrade clutter-develUpgrade gnome-menus-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade baobab-debugsourceUpgrade baobab-debuginfoUpgrade clutter-docUpgrade clutterUpgrade mozjs52-debuginfoUpgrade gnome-menusUpgrade baobabUpgrade mozjs52Upgrade gnome-menus-debugsourceUpgrade mozjs60-debugsourceUpgrade mozjs60-develUpgrade mozjs60 | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-backendsUpgrade gvfs-langUpgrade gvfs-backend-sambaUpgrade gvfs-backend-afcUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-32bitUpgrade gvfs-devel | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub