An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade clutterUpgrade baobabUpgrade gnome-menusUpgrade mozjs60Upgrade mozjs52Upgrade mozjs60-develUpgrade clutter-docUpgrade vala-develUpgrade accountsservice-develUpgrade clutter-develUpgrade gnome-menus-develUpgrade valaUpgrade gnome-tweaksUpgrade mozjs52-develUpgrade gjs-devel | May 4, 2022 | May 29, 2019 |
| Alpine Linux | — | Upgrade gvfs | Aug 22, 2024 | May 29, 2019 |
| Centos_linux | — | Upgrade accountsservice-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-control-center-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-shellUpgrade gsettings-desktop-schemasUpgrade gvfs-smbUpgrade accountsservice-libs-debuginfoUpgrade gnome-software-editorUpgrade nautilus-extensions-debuginfoUpgrade gtk3-tests-debuginfoUpgrade evince-libsUpgrade gvfs-mtp-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-softwareUpgrade LibRawUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-boxesUpgrade gnome-boxes-debuginfoUpgrade gnome-control-centerUpgrade gvfs-goaUpgrade nautilusUpgrade gnome-terminal-debugsourceUpgrade gvfs-client-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade gdm-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade clutter-debugsourceUpgrade evinceUpgrade nautilus-debuginfoUpgrade gjs-debuginfoUpgrade clutterUpgrade gvfs-mtpUpgrade mozjs52Upgrade gvfs-gphoto2-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-remote-desktopUpgrade gjs-tests-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade mozjs52-debuginfoUpgrade mutterUpgrade gnome-online-accountsUpgrade baobab-debugsourceUpgrade gdmUpgrade gnome-boxes-debugsourceUpgrade gjs-debugsourceUpgrade libvncserverUpgrade gnome-session-debuginfoUpgrade libxsltUpgrade gvfs-gphoto2Upgrade mozjs52-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gvfs-fuseUpgrade mutter-debugsourceUpgrade libxslt-develUpgrade appstream-dataUpgrade gnome-shell-debuginfoUpgrade gnome-software-debuginfoUpgrade libxslt-debugsourceUpgrade gnome-shell-debugsourceUpgrade evince-debugsourceUpgrade gvfs-debugsourceUpgrade gnome-tweaksUpgrade mozjs60-debuginfoUpgrade libvncserver-debuginfoUpgrade libvncserver-debugsourceUpgrade gvfs-goa-debuginfoUpgrade gnome-menus-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade vinagre-debuginfoUpgrade gnome-terminalUpgrade gnome-menus-debuginfoUpgrade evince-debuginfoUpgrade gvfs-develUpgrade vinagre-debugsourceUpgrade gvfs-afcUpgrade gtk3-develUpgrade gnome-online-accounts-debugsourceUpgrade gnome-settings-daemonUpgrade evince-nautilus-debuginfoUpgrade gvfs-clientUpgrade gnome-terminal-nautilus-debuginfoUpgrade mutter-tests-debuginfoUpgrade mozjs60Upgrade evince-nautilusUpgrade accountsserviceUpgrade gnome-session-wayland-sessionUpgrade mozjs60-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gjsUpgrade baobabUpgrade gnome-session-xsessionUpgrade baobab-debuginfoUpgrade LibRaw-debuginfoUpgrade libxslt-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gvfs-archiveUpgrade gtk3-immodule-ximUpgrade gnome-session-debugsourceUpgrade gvfs-afpUpgrade clutter-debuginfoUpgrade gdm-debuginfoUpgrade evince-browser-pluginUpgrade evince-libs-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-software-editor-debuginfoUpgrade accountsservice-libsUpgrade gtk3Upgrade gvfsUpgrade nautilus-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade clutter-tests-debuginfoUpgrade vinagreUpgrade gtk-update-icon-cacheUpgrade mutter-debuginfoUpgrade nautilus-extensionsUpgrade gnome-online-accounts-develUpgrade gtk3-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-menusUpgrade gnome-sessionUpgrade gvfs-archive-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-software-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gvfs-debuginfoUpgrade gvfs-afc-debuginfo | Apr 29, 2020 | May 29, 2019 |
| Debian | — | Upgrade gvfs | Jul 30, 2024 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-afcUpgrade gvfs-afpUpgrade gvfs-develUpgrade gvfs-mtpUpgrade gvfs-clientUpgrade gvfs-fuseUpgrade gvfs-smbUpgrade gvfs-archiveUpgrade gvfs-goaUpgrade gvfs-gphoto2Upgrade gvfs | Sep 24, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gvfs-gphoto2Upgrade gvfs-afpUpgrade gvfs-mtpUpgrade gvfs-archiveUpgrade gvfs-clientUpgrade gvfs-smbUpgrade gvfsUpgrade gvfs-afcUpgrade gvfs-goaUpgrade gvfs-develUpgrade gvfs-fuse | Sep 30, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade accountsservice-develUpgrade mozjs52Upgrade gnome-menusUpgrade LibRawUpgrade vala-develUpgrade mutter-develUpgrade mutterUpgrade mozjs60-develUpgrade gnome-tweaksUpgrade accountsserviceUpgrade evinceUpgrade clutter-docUpgrade appstream-dataUpgrade gtk3-immodule-ximUpgrade libxslt-develUpgrade gnome-softwareUpgrade gnome-session-wayland-sessionUpgrade libxsltUpgrade mozjs60Upgrade gnome-control-centerUpgrade clutter-develUpgrade gnome-software-editorUpgrade gnome-sessionUpgrade gnome-terminalUpgrade evince-libsUpgrade gnome-session-xsessionUpgrade nautilus-develUpgrade gsettings-desktop-schemas-develUpgrade gtk3Upgrade clutterUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-develUpgrade gtk-update-icon-cacheUpgrade gnome-remote-desktopUpgrade nautilus-extensionsUpgrade libvncserver-develUpgrade gnome-control-center-filesystemUpgrade gjs-develUpgrade accountsservice-libsUpgrade gnome-online-accountsUpgrade mozjs52-develUpgrade gjsUpgrade gnome-menus-develUpgrade evince-browser-pluginUpgrade gnome-terminal-nautilusUpgrade nautilusUpgrade gtk3-develUpgrade gnome-shellUpgrade valaUpgrade gdmUpgrade vinagreUpgrade gnome-settings-daemonUpgrade LibRaw-develUpgrade libvncserverUpgrade gnome-boxesUpgrade evince-nautilus | Jul 22, 2024 | May 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade libvncserver-debugsourceUpgrade LibRawUpgrade gnome-control-center-debuginfoUpgrade gvfs-goa-debuginfoUpgrade clutter-docUpgrade gtk3-devel-debuginfoUpgrade gvfs-goaUpgrade vinagreUpgrade nautilus-extensionsUpgrade evince-nautilusUpgrade gnome-software-editor-debuginfoUpgrade gnome-boxesUpgrade gnome-remote-desktop-debuginfoUpgrade mozjs52-debugsourceUpgrade libxslt-debugsourceUpgrade gnome-softwareNo solution existsUpgrade gnome-control-center-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gnome-software-editorUpgrade gjs-develUpgrade gnome-control-centerUpgrade gnome-software-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade accountsservice-debuginfoUpgrade evince-debugsourceUpgrade gvfs-afp-debuginfoUpgrade gvfsUpgrade gnome-session-wayland-sessionUpgrade gvfs-client-debuginfoUpgrade mutter-tests-debuginfoUpgrade appstream-dataUpgrade evince-debuginfoUpgrade gjs-tests-debuginfoUpgrade gsettings-desktop-schemasUpgrade gvfs-gphoto2Upgrade gnome-software-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gjs-debuginfoUpgrade clutter-develUpgrade evince-libs-debuginfoUpgrade evince-libsUpgrade nautilus-extensions-debuginfoUpgrade libvncserver-develUpgrade mozjs60-develUpgrade mozjs52-devel-debuginfoUpgrade libxslt-develUpgrade gnome-menus-develUpgrade gvfs-fuseUpgrade LibRaw-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-sessionUpgrade gnome-settings-daemon-debugsourceUpgrade libvncserverUpgrade gnome-boxes-debugsourceUpgrade LibRaw-debuginfoUpgrade mozjs60-debuginfoUpgrade nautilus-develUpgrade clutter-tests-debuginfoUpgrade libxsltUpgrade accountsserviceUpgrade nautilus-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-tweaksUpgrade gvfs-fuse-debuginfoUpgrade mozjs52Upgrade mozjs52-develUpgrade gvfs-archiveUpgrade gvfs-smb-debuginfoUpgrade clutterUpgrade mutterUpgrade gnome-shell-debuginfoUpgrade accountsservice-develUpgrade gsettings-desktop-schemas-develUpgrade gdm-debuginfoUpgrade gnome-session-debugsourceUpgrade gvfs-smbUpgrade gjs-debugsourceUpgrade clutter-debugsourceUpgrade gnome-terminalUpgrade gvfs-mtpUpgrade gtk3-debugsourceUpgrade libvncserver-debuginfoUpgrade vala-develUpgrade gnome-online-accountsUpgrade baobabUpgrade mozjs52-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-remote-desktopUpgrade vinagre-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade accountsservice-libsUpgrade valadoc-debuginfoUpgrade gnome-session-xsessionUpgrade gvfs-afc-debuginfoUpgrade mutter-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-terminal-nautilus-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gtk3Upgrade mutter-develUpgrade baobab-debuginfoUpgrade gdmUpgrade gvfs-archive-debuginfoUpgrade gnome-shellUpgrade gnome-menusUpgrade nautilus-debuginfoUpgrade gtk3-debuginfoUpgrade valaUpgrade gvfs-debugsourceUpgrade accountsservice-debugsourceUpgrade libxslt-debuginfoUpgrade evince-browser-pluginUpgrade vala-debugsourceUpgrade gjsUpgrade gnome-terminal-debugsourceUpgrade mozjs60-debugsourceUpgrade gdm-debugsourceUpgrade mozjs60Upgrade vala-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-develUpgrade vinagre-debuginfoUpgrade baobab-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gvfs-debuginfoUpgrade nautilusUpgrade LibRaw-develUpgrade gnome-menus-debuginfoUpgrade clutter-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade mutter-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-session-debuginfoUpgrade gvfs-afcUpgrade gnome-terminal-debuginfoUpgrade gnome-online-accounts-develUpgrade LibRaw-samples-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-menus-debugsourceUpgrade gvfs-afpUpgrade gnome-control-center-filesystemUpgrade evinceUpgrade gtk3-develUpgrade gtk-update-icon-cacheUpgrade gvfs-client | Apr 29, 2020 | May 29, 2019 |
| Rocky_linux | — | Upgrade mozjs60-develUpgrade mozjs52Upgrade baobabUpgrade gnome-menus-debugsourceUpgrade mozjs60-debugsourceUpgrade mozjs52-debuginfoUpgrade baobab-debugsourceUpgrade clutter-docUpgrade mozjs60Upgrade clutterUpgrade gnome-menusUpgrade baobab-debuginfoUpgrade gnome-menus-develUpgrade gnome-menus-debuginfoUpgrade clutter-debugsourceUpgrade clutter-develUpgrade mozjs52-devel-debuginfoUpgrade mozjs60-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs52-develUpgrade clutter-debuginfo | Mar 12, 2024 | May 29, 2019 |
| Suse | — | Upgrade gvfs-32bitUpgrade gvfs-fuseUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-backend-sambaUpgrade gvfs-backend-afcUpgrade gvfs-backendsUpgrade gvfs-lang | Jul 9, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade gvfsUpgrade gvfs-backends | Jul 10, 2019 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub