The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gvfs-goaUpgrade gvfs-archive-debuginfoUpgrade gvfs-afcUpgrade gvfs-debugsourceUpgrade gvfs-testsUpgrade gvfsUpgrade gvfs-fuseUpgrade gvfs-mtpUpgrade gvfs-develUpgrade gvfs-afpUpgrade gvfs-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gvfs-smbUpgrade gvfs-client-debuginfoUpgrade gvfs-archiveUpgrade gvfs-clientUpgrade gvfs-goa-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gvfs-gphoto2 | Aug 28, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade gvfs | Feb 14, 2019 | Feb 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gvfs-fuseUpgrade gvfs-mtpUpgrade gvfs-goaUpgrade gvfs-afcUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-clientUpgrade gvfs-gphoto2Upgrade gvfs-afpUpgrade gvfs-smbUpgrade gvfs-archive | Nov 19, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade gvfs-clientUpgrade gvfs-testsUpgrade gvfs-archiveUpgrade gvfs-afpUpgrade gvfs-smbUpgrade gvfs-afcUpgrade gvfs-goaUpgrade gvfs-fuseUpgrade gvfs-gphoto2Upgrade gvfs-mtpUpgrade gvfs-develUpgrade gvfs | Jul 21, 2020 | Dec 27, 2018 |
| Redhat_linux | — | Upgrade gvfs-mtp-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gvfs-archiveUpgrade gvfs-afc-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gvfs-afpUpgrade gvfs-gphoto2Upgrade gvfs-testsUpgrade gvfs-develUpgrade gvfsUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-mtpUpgrade gvfs-afcUpgrade gvfs-clientUpgrade gvfs-debugsourceUpgrade gvfs-debuginfoUpgrade gvfs-fuseUpgrade gvfs-goa-debuginfoUpgrade gvfs-client-debuginfoUpgrade gvfs-smbUpgrade gvfs-goaUpgrade gvfs-fuse-debuginfo | Jun 19, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade gvfs-backend-sambaUpgrade gvfsUpgrade gvfs-backendsUpgrade gvfs-backend-afcUpgrade gvfs-develUpgrade gvfs-fuseUpgrade gvfs-langUpgrade gvfs-32bit | Feb 28, 2019 | Feb 12, 2019 |
| Ubuntu | — | Upgrade gvfs-backendsUpgrade gvfs | Feb 16, 2019 | Feb 12, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub