CVE-2019-12447

Опубликовано: 29 мая 2019

Источник: nvd

CVSS3: 7.3

CVSS2: 4.9

EPSS Низкий

Описание

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/07/09/3
Mailing List
Third Party Advisory
https://gitlab.gnome.org/GNOME/gvfs/commit/d7d362995aa0cb8905c8d5c2a2a4c305d2ffff80
Patch
Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/
https://usn.ubuntu.com/4053-1/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/07/09/3
Mailing List
Third Party Advisory
https://gitlab.gnome.org/GNOME/gvfs/commit/d7d362995aa0cb8905c8d5c2a2a4c305d2ffff80
Patch
Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/
https://usn.ubuntu.com/4053-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnome:gvfs:*:*:*:*:*:*:*:*

Версия от 1.29.4 (включая) до 1.41.2 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00887

Низкий

7.3 High

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-12447

CVSS3: 7.3

ubuntu

около 6 лет назад

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

CVE-2019-12447

CVSS3: 6.4

redhat

около 6 лет назад

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

CVE-2019-12447

CVSS3: 7.3

debian

около 6 лет назад

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gv ...

GHSA-4hjh-mpfm-qhm5

github

около 3 лет назад

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

BDU:2019-02514

CVSS3: 9.8

fstec

около 6 лет назад

Уязвимость компонента daemon/gvfsbackendadmin.c подсистемы GVFS среды рабочего стола GNOME операционных систем Linux, позволяющая нарушителю оказать воздействие на целостность, конфиденциальность и доступность защищаемой информации

EPSS

Процентиль: 74%

0.00887

Низкий

7.3 High

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo