CVE-2019-12449

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html · Third Party Advisory
• openwall.com/lists/oss-security/2019/07/09/3 · Mailing List
• gitlab.gnome.org/GNOME/gvfs/commit/409619412e11be146a31b9a99ed965925f1aabb8 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2
• usn.ubuntu.com/4053-1 · Third Party Advisory

gvfs のその他の脆弱性

• CVE-2019-12795高 7.8daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server soc…
• CVE-2019-12448高 8.1An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't…
• CVE-2019-12447高 7.3An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not use…
• CVE-2019-3827高 7.0An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by…