CVE-2019-12450

Опубликовано: 29 мая 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00076.html
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3530
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/commit/d8f8f4d637ce43f8699ba94c9b7648beda0ca174
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/06/msg00013.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4WIOAGO3M743M5KZLVQZM3NGHQDYLI/
https://security.netapp.com/advisory/ntap-20190606-0003/
Third Party Advisory
https://usn.ubuntu.com/4014-1/
Third Party Advisory
https://usn.ubuntu.com/4014-2/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00076.html
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3530
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/commit/d8f8f4d637ce43f8699ba94c9b7648beda0ca174
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/06/msg00013.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4WIOAGO3M743M5KZLVQZM3NGHQDYLI/
https://security.netapp.com/advisory/ntap-20190606-0003/
Third Party Advisory
https://usn.ubuntu.com/4014-1/
Third Party Advisory
https://usn.ubuntu.com/4014-2/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Версия от 2.15.0 (включая) до 2.61.1 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

Конфигурация 5

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

Конфигурация 6

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00802

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-276

Связанные уязвимости

CVE-2019-12450

CVSS3: 9.8

ubuntu

больше 6 лет назад

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

CVE-2019-12450

CVSS3: 6.6

redhat

больше 6 лет назад

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

CVE-2019-12450

CVSS3: 9.8

msrc

около 5 лет назад

Описание отсутствует

CVE-2019-12450

CVSS3: 9.8

debian

больше 6 лет назад

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 ...

openSUSE-SU-2019:1650-1

suse-cvrf

около 6 лет назад

Security update for glib2

EPSS

Процентиль: 73%

0.00802

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-276