An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-gvfscentos-upgrade-gvfs-afccentos-upgrade-gvfs-afc-debuginfocentos-upgrade-gvfs-afpcentos-upgrade-gvfs-afp-debuginfocentos-upgrade-gvfs-archivecentos-upgrade-gvfs-archive-debuginfocentos-upgrade-gvfs-clientcentos-upgrade-gvfs-client-debuginfocentos-upgrade-gvfs-debuginfocentos-upgrade-gvfs-debugsourcecentos-upgrade-gvfs-develcentos-upgrade-gvfs-fusecentos-upgrade-gvfs-fuse-debuginfocentos-upgrade-gvfs-goacentos-upgrade-gvfs-goa-debuginfocentos-upgrade-gvfs-gphoto2centos-upgrade-gvfs-gphoto2-debuginfocentos-upgrade-gvfs-mtpcentos-upgrade-gvfs-mtp-debuginfocentos-upgrade-gvfs-smbcentos-upgrade-gvfs-smb-debuginfocentos-upgrade-gvfs-tests | Aug 28, 2019 | Mar 25, 2019 |
| Debian | debian-upgrade-gvfs | Feb 14, 2019 | Feb 14, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-gvfshuawei-euleros-2_0_sp5-upgrade-gvfs-afchuawei-euleros-2_0_sp5-upgrade-gvfs-afphuawei-euleros-2_0_sp5-upgrade-gvfs-archivehuawei-euleros-2_0_sp5-upgrade-gvfs-clienthuawei-euleros-2_0_sp5-upgrade-gvfs-develhuawei-euleros-2_0_sp5-upgrade-gvfs-fusehuawei-euleros-2_0_sp5-upgrade-gvfs-goahuawei-euleros-2_0_sp5-upgrade-gvfs-gphoto2huawei-euleros-2_0_sp5-upgrade-gvfs-mtphuawei-euleros-2_0_sp5-upgrade-gvfs-smb | Nov 19, 2019 | Mar 25, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-gvfsoracle-linux-upgrade-gvfs-afcoracle-linux-upgrade-gvfs-afporacle-linux-upgrade-gvfs-archiveoracle-linux-upgrade-gvfs-clientoracle-linux-upgrade-gvfs-develoracle-linux-upgrade-gvfs-fuseoracle-linux-upgrade-gvfs-goaoracle-linux-upgrade-gvfs-gphoto2oracle-linux-upgrade-gvfs-mtporacle-linux-upgrade-gvfs-smboracle-linux-upgrade-gvfs-tests | Jul 21, 2020 | Dec 27, 2018 |
| Redhat_linux | redhat-upgrade-gvfsredhat-upgrade-gvfs-afcredhat-upgrade-gvfs-afc-debuginforedhat-upgrade-gvfs-afpredhat-upgrade-gvfs-afp-debuginforedhat-upgrade-gvfs-archiveredhat-upgrade-gvfs-archive-debuginforedhat-upgrade-gvfs-clientredhat-upgrade-gvfs-client-debuginforedhat-upgrade-gvfs-debuginforedhat-upgrade-gvfs-debugsourceredhat-upgrade-gvfs-develredhat-upgrade-gvfs-fuseredhat-upgrade-gvfs-fuse-debuginforedhat-upgrade-gvfs-goaredhat-upgrade-gvfs-goa-debuginforedhat-upgrade-gvfs-gphoto2redhat-upgrade-gvfs-gphoto2-debuginforedhat-upgrade-gvfs-mtpredhat-upgrade-gvfs-mtp-debuginforedhat-upgrade-gvfs-smbredhat-upgrade-gvfs-smb-debuginforedhat-upgrade-gvfs-tests | Jun 19, 2019 | Mar 25, 2019 | |
| Suse | — | suse-upgrade-gvfssuse-upgrade-gvfs-32bitsuse-upgrade-gvfs-backend-afcsuse-upgrade-gvfs-backend-sambasuse-upgrade-gvfs-backendssuse-upgrade-gvfs-develsuse-upgrade-gvfs-fusesuse-upgrade-gvfs-lang | Feb 28, 2019 | Feb 12, 2019 |
| Ubuntu | ubuntu-upgrade-gvfsubuntu-upgrade-gvfs-backends | Feb 16, 2019 | Feb 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub