vulnerability

SUSE: CVE-2019-12449: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:M/Au:S/C:P/I:N/A:N)
Published
May 29, 2019
Added
Jul 9, 2019
Modified
Oct 22, 2021

Description

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.

Solution(s)

suse-upgrade-gvfssuse-upgrade-gvfs-32bitsuse-upgrade-gvfs-backend-afcsuse-upgrade-gvfs-backend-sambasuse-upgrade-gvfs-backendssuse-upgrade-gvfs-develsuse-upgrade-gvfs-fusesuse-upgrade-gvfs-lang
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.