Vulnerability-Lookup

OPENSUSE-SU-2019:1697-1

Vulnerability from csaf_opensuse - Published: 2019-07-07 18:27 - Updated: 2026-09-20 18:52

Summary

Security update for gvfs

Severity

Important

Notes

Title of the patch: Security update for gvfs

Description of the patch: This update for gvfs fixes the following issues: Security issues fixed: - CVE-2019-12795: Fixed a vulnerability which could have allowed attacks via local D-Bus method calls (bsc#1137930). - CVE-2019-12447: Fixed an improper handling of file ownership in daemon/gvfsbackendadmin.c due to no use of setfsuid (bsc#1136986). - CVE-2019-12449: Fixed an improper handling of file's user and group ownership in daemon/gvfsbackendadmin.c (bsc#1136992). - CVE-2019-12448: Fixed race conditions in daemon/gvfsbackendadmin.c due to implementation of query_info_on_read/write at admin backend (bsc#1136981). Other issue addressed: - Drop polkit rules files that are only relevant for wheel group (bsc#1125433). This update was imported from the SUSE:SLE-15:Update update project.

Patchnames: openSUSE-2019-1697

CVE-2019-12447

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 14 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch	—	Vendor Fix

Threats

Impact critical

CVE-2019-12448

8.1 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 14 products, the same list as for CVE-2019-12447

Threats

Impact important

CVE-2019-12449

5.7 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Affected products

Recommended 14 products, the same list as for CVE-2019-12447

Threats

Impact critical

CVE-2019-12795

5.9 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 14 products, the same list as for CVE-2019-12447

Threats

Impact moderate

References

22 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://lists.opensuse.org/archives/list/security…	self
https://lists.opensuse.org/archives/list/security…	self
https://bugzilla.suse.com/1125433	self
https://bugzilla.suse.com/1136981	self
https://bugzilla.suse.com/1136986	self
https://bugzilla.suse.com/1136992	self
https://bugzilla.suse.com/1137930	self
https://www.suse.com/security/cve/CVE-2019-12447/	self
https://www.suse.com/security/cve/CVE-2019-12448/	self
https://www.suse.com/security/cve/CVE-2019-12449/	self
https://www.suse.com/security/cve/CVE-2019-12795/	self
https://www.suse.com/security/cve/CVE-2019-12447	external
https://bugzilla.suse.com/1136986	external
https://www.suse.com/security/cve/CVE-2019-12448	external
https://bugzilla.suse.com/1136981	external
https://www.suse.com/security/cve/CVE-2019-12449	external
https://bugzilla.suse.com/1136992	external
https://www.suse.com/security/cve/CVE-2019-12795	external
https://bugzilla.suse.com/1137930	external
https://bugzilla.suse.com/1209876	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for gvfs",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for gvfs fixes the following issues:\n\nSecurity issues fixed:    \n   \n- CVE-2019-12795: Fixed a vulnerability which could have allowed attacks via local \n  D-Bus method calls (bsc#1137930).\n- CVE-2019-12447: Fixed an improper handling of file ownership in daemon/gvfsbackendadmin.c \n  due to no use of setfsuid (bsc#1136986).    \n- CVE-2019-12449: Fixed an improper handling of file\u0027s user and group ownership  \n  in daemon/gvfsbackendadmin.c (bsc#1136992).\n- CVE-2019-12448: Fixed race conditions in daemon/gvfsbackendadmin.c due to implementation \n  of query_info_on_read/write at admin backend (bsc#1136981).\n\nOther issue addressed: \n    \n- Drop polkit rules files that are only relevant for wheel group (bsc#1125433).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-1697",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1697-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:1697-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L4KV772XYLUHPJGQBGWHWCYVYIXBAG2Y/#L4KV772XYLUHPJGQBGWHWCYVYIXBAG2Y"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:1697-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L4KV772XYLUHPJGQBGWHWCYVYIXBAG2Y/#L4KV772XYLUHPJGQBGWHWCYVYIXBAG2Y"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1125433",
        "url": "https://bugzilla.suse.com/1125433"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136981",
        "url": "https://bugzilla.suse.com/1136981"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136986",
        "url": "https://bugzilla.suse.com/1136986"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1136992",
        "url": "https://bugzilla.suse.com/1136992"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1137930",
        "url": "https://bugzilla.suse.com/1137930"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12447 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12447/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12448 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12448/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12449 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12449/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12795 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12795/"
      }
    ],
    "title": "Security update for gvfs",
    "tracking": {
      "current_release_date": "2026-09-20T18:52:12Z",
      "generator": {
        "date": "2019-07-07T18:27:39Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:1697-1",
      "initial_release_date": "2019-07-07T18:27:39Z",
      "revision_history": [
        {
          "date": "2019-07-07T18:27:39Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T18:52:12Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gvfs-0:1.34.2.1-lp151.6.3.1.i586",
                "product": {
                  "name": "gvfs-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_id": "gvfs-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs@1.34.2.1-lp151.6.3.1?arch=i586\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
                "product": {
                  "name": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_id": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-backend-afc@1.34.2.1-lp151.6.3.1?arch=i586\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
                "product": {
                  "name": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_id": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-backend-samba@1.34.2.1-lp151.6.3.1?arch=i586\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
                "product": {
                  "name": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_id": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-backends@1.34.2.1-lp151.6.3.1?arch=i586\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
                "product": {
                  "name": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_id": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-devel@1.34.2.1-lp151.6.3.1?arch=i586\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
                "product": {
                  "name": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_id": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-fuse@1.34.2.1-lp151.6.3.1?arch=i586\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch",
                "product": {
                  "name": "gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch",
                  "product_id": "gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-lang@1.34.2.1-lp151.6.3.1?arch=noarch\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
                "product": {
                  "name": "gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_id": "gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs@1.34.2.1-lp151.6.3.1?arch=x86_64\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
                "product": {
                  "name": "gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_id": "gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-32bit@1.34.2.1-lp151.6.3.1?arch=x86_64\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
                "product": {
                  "name": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_id": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-backend-afc@1.34.2.1-lp151.6.3.1?arch=x86_64\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
                "product": {
                  "name": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_id": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-backend-samba@1.34.2.1-lp151.6.3.1?arch=x86_64\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
                "product": {
                  "name": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_id": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-backends@1.34.2.1-lp151.6.3.1?arch=x86_64\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
                "product": {
                  "name": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_id": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-devel@1.34.2.1-lp151.6.3.1?arch=x86_64\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
                "product": {
                  "name": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_id": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnome:gvfs:1.34.2.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gvfs-fuse@1.34.2.1-lp151.6.3.1?arch=x86_64\u0026upstream=gvfs-0:1.34.2.1-lp151.6.3.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-0:1.34.2.1-lp151.6.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586"
        },
        "product_reference": "gvfs-0:1.34.2.1-lp151.6.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-0:1.34.2.1-lp151.6.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64"
        },
        "product_reference": "gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64"
        },
        "product_reference": "gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586"
        },
        "product_reference": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64"
        },
        "product_reference": "gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586"
        },
        "product_reference": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64"
        },
        "product_reference": "gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586"
        },
        "product_reference": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64"
        },
        "product_reference": "gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586"
        },
        "product_reference": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64"
        },
        "product_reference": "gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586"
        },
        "product_reference": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64"
        },
        "product_reference": "gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
        },
        "product_reference": "gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-12447",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12447"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12447",
          "url": "https://www.suse.com/security/cve/CVE-2019-12447"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136986 for CVE-2019-12447",
          "url": "https://bugzilla.suse.com/1136986"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-07T18:27:39Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2019-12447"
    },
    {
      "cve": "CVE-2019-12448",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12448"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn\u0027t implement query_info_on_read/write.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12448",
          "url": "https://www.suse.com/security/cve/CVE-2019-12448"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136981 for CVE-2019-12448",
          "url": "https://bugzilla.suse.com/1136981"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-07T18:27:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-12448"
    },
    {
      "cve": "CVE-2019-12449",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12449"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file\u0027s user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12449",
          "url": "https://www.suse.com/security/cve/CVE-2019-12449"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1136992 for CVE-2019-12449",
          "url": "https://bugzilla.suse.com/1136992"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-07T18:27:39Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2019-12449"
    },
    {
      "cve": "CVE-2019-12795",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12795"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
          "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
          "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12795",
          "url": "https://www.suse.com/security/cve/CVE-2019-12795"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137930 for CVE-2019-12795",
          "url": "https://bugzilla.suse.com/1137930"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209876 for CVE-2019-12795",
          "url": "https://bugzilla.suse.com/1209876"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-32bit-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-afc-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backend-samba-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-backends-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-devel-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.i586",
            "openSUSE Leap 15.1:gvfs-fuse-0:1.34.2.1-lp151.6.3.1.x86_64",
            "openSUSE Leap 15.1:gvfs-lang-0:1.34.2.1-lp151.6.3.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-07T18:27:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-12795"
    }
  ]
}

CVE-2019-12447 (GCVE-0-2019-12447)

Vulnerability from cvelistv5 – Published: 2019-05-29 16:15 – Updated: 2024-08-04 23:17

Summary

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2316 records in the last 180 days details

References

7 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4053-1/	vendor-advisoryx_refsource_UBUNTU
http://www.openwall.com/lists/oss-security/2019/07/09/3	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://gitlab.gnome.org/GNOME/gvfs/commit/d7d362…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:17:40.030Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2019:1699",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2019:1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
          },
          {
            "name": "USN-4053-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4053-1/"
          },
          {
            "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
          },
          {
            "name": "FEDORA-2019-6ed5523cc0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
          },
          {
            "name": "FEDORA-2019-e6b02af8b8",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/d7d362995aa0cb8905c8d5c2a2a4c305d2ffff80"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-22T18:26:31.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2019:1699",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2019:1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
        },
        {
          "name": "USN-4053-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4053-1/"
        },
        {
          "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
        },
        {
          "name": "FEDORA-2019-6ed5523cc0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
        },
        {
          "name": "FEDORA-2019-e6b02af8b8",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/d7d362995aa0cb8905c8d5c2a2a4c305d2ffff80"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-12447",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2019:1699",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2019:1697",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
            },
            {
              "name": "USN-4053-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4053-1/"
            },
            {
              "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
            },
            {
              "name": "FEDORA-2019-6ed5523cc0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
            },
            {
              "name": "FEDORA-2019-e6b02af8b8",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
            },
            {
              "name": "https://gitlab.gnome.org/GNOME/gvfs/commit/d7d362995aa0cb8905c8d5c2a2a4c305d2ffff80",
              "refsource": "MISC",
              "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/d7d362995aa0cb8905c8d5c2a2a4c305d2ffff80"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-12447",
    "datePublished": "2019-05-29T16:15:29.000Z",
    "dateReserved": "2019-05-29T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:17:40.030Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-12448 (GCVE-0-2019-12448)

Vulnerability from cvelistv5 – Published: 2019-05-29 16:15 – Updated: 2024-08-04 23:17

Summary

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2316 records in the last 180 days details

References

7 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4053-1/	vendor-advisoryx_refsource_UBUNTU
http://www.openwall.com/lists/oss-security/2019/07/09/3	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://gitlab.gnome.org/GNOME/gvfs/commit/764e9a…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:17:40.017Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2019:1699",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2019:1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
          },
          {
            "name": "USN-4053-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4053-1/"
          },
          {
            "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
          },
          {
            "name": "FEDORA-2019-6ed5523cc0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
          },
          {
            "name": "FEDORA-2019-e6b02af8b8",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/764e9af7522e3096c0f44613c330377d31c9bbb5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn\u0027t implement query_info_on_read/write."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-22T18:28:08.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2019:1699",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2019:1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
        },
        {
          "name": "USN-4053-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4053-1/"
        },
        {
          "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
        },
        {
          "name": "FEDORA-2019-6ed5523cc0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
        },
        {
          "name": "FEDORA-2019-e6b02af8b8",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/764e9af7522e3096c0f44613c330377d31c9bbb5"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-12448",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn\u0027t implement query_info_on_read/write."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2019:1699",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2019:1697",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
            },
            {
              "name": "USN-4053-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4053-1/"
            },
            {
              "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
            },
            {
              "name": "FEDORA-2019-6ed5523cc0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
            },
            {
              "name": "FEDORA-2019-e6b02af8b8",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
            },
            {
              "name": "https://gitlab.gnome.org/GNOME/gvfs/commit/764e9af7522e3096c0f44613c330377d31c9bbb5",
              "refsource": "MISC",
              "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/764e9af7522e3096c0f44613c330377d31c9bbb5"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-12448",
    "datePublished": "2019-05-29T16:15:57.000Z",
    "dateReserved": "2019-05-29T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:17:40.017Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-12449 (GCVE-0-2019-12449)

Vulnerability from cvelistv5 – Published: 2019-05-29 16:16 – Updated: 2024-08-04 23:17

Summary

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2316 records in the last 180 days details

References

7 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4053-1/	vendor-advisoryx_refsource_UBUNTU
http://www.openwall.com/lists/oss-security/2019/07/09/3	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://gitlab.gnome.org/GNOME/gvfs/commit/409619…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:17:40.051Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2019:1699",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2019:1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
          },
          {
            "name": "USN-4053-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4053-1/"
          },
          {
            "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
          },
          {
            "name": "FEDORA-2019-6ed5523cc0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
          },
          {
            "name": "FEDORA-2019-e6b02af8b8",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/409619412e11be146a31b9a99ed965925f1aabb8"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file\u0027s user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-22T18:29:37.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2019:1699",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2019:1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
        },
        {
          "name": "USN-4053-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4053-1/"
        },
        {
          "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
        },
        {
          "name": "FEDORA-2019-6ed5523cc0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
        },
        {
          "name": "FEDORA-2019-e6b02af8b8",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/409619412e11be146a31b9a99ed965925f1aabb8"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-12449",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file\u0027s user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2019:1699",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2019:1697",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
            },
            {
              "name": "USN-4053-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4053-1/"
            },
            {
              "name": "[oss-security] 20190709 Privileged File Access from Desktop Applications",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/07/09/3"
            },
            {
              "name": "FEDORA-2019-6ed5523cc0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
            },
            {
              "name": "FEDORA-2019-e6b02af8b8",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
            },
            {
              "name": "https://gitlab.gnome.org/GNOME/gvfs/commit/409619412e11be146a31b9a99ed965925f1aabb8",
              "refsource": "MISC",
              "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/409619412e11be146a31b9a99ed965925f1aabb8"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-12449",
    "datePublished": "2019-05-29T16:16:06.000Z",
    "dateReserved": "2019-05-29T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:17:40.051Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-12795 (GCVE-0-2019-12795)

Vulnerability from cvelistv5 – Published: 2019-06-11 21:07 – Updated: 2024-08-04 23:32

Summary

daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2316 records in the last 180 days details

References

11 references

URL	Tags
https://gitlab.gnome.org/GNOME/gvfs/commit/70dbfc…	x_refsource_MISC
https://gitlab.gnome.org/GNOME/gvfs/commit/d8c913…	x_refsource_MISC
https://gitlab.gnome.org/GNOME/gvfs/commit/e3808a…	x_refsource_MISC
http://www.securityfocus.com/bid/108741	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4053-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://access.redhat.com/errata/RHSA-2019:3553	vendor-advisoryx_refsource_REDHAT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:32:54.828Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/70dbfc68a79faac49bd3423e079cb6902522082a"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/d8c9138bf240975848b1c54db648ec4cd516a48f"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/e3808a1b4042761055b1d975333a8243d67b8bfe"
          },
          {
            "name": "108741",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108741"
          },
          {
            "name": "[debian-lts-announce] 20190619 [SECURITY] [DLA 1827-1] gvfs security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00014.html"
          },
          {
            "name": "openSUSE-SU-2019:1699",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2019:1697",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
          },
          {
            "name": "USN-4053-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4053-1/"
          },
          {
            "name": "FEDORA-2019-6ed5523cc0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
          },
          {
            "name": "FEDORA-2019-e6b02af8b8",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
          },
          {
            "name": "RHSA-2019:3553",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3553"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-06T00:08:24.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/70dbfc68a79faac49bd3423e079cb6902522082a"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/d8c9138bf240975848b1c54db648ec4cd516a48f"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/e3808a1b4042761055b1d975333a8243d67b8bfe"
        },
        {
          "name": "108741",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108741"
        },
        {
          "name": "[debian-lts-announce] 20190619 [SECURITY] [DLA 1827-1] gvfs security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00014.html"
        },
        {
          "name": "openSUSE-SU-2019:1699",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2019:1697",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
        },
        {
          "name": "USN-4053-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4053-1/"
        },
        {
          "name": "FEDORA-2019-6ed5523cc0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
        },
        {
          "name": "FEDORA-2019-e6b02af8b8",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
        },
        {
          "name": "RHSA-2019:3553",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3553"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-12795",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gitlab.gnome.org/GNOME/gvfs/commit/70dbfc68a79faac49bd3423e079cb6902522082a",
              "refsource": "MISC",
              "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/70dbfc68a79faac49bd3423e079cb6902522082a"
            },
            {
              "name": "https://gitlab.gnome.org/GNOME/gvfs/commit/d8c9138bf240975848b1c54db648ec4cd516a48f",
              "refsource": "MISC",
              "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/d8c9138bf240975848b1c54db648ec4cd516a48f"
            },
            {
              "name": "https://gitlab.gnome.org/GNOME/gvfs/commit/e3808a1b4042761055b1d975333a8243d67b8bfe",
              "refsource": "MISC",
              "url": "https://gitlab.gnome.org/GNOME/gvfs/commit/e3808a1b4042761055b1d975333a8243d67b8bfe"
            },
            {
              "name": "108741",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108741"
            },
            {
              "name": "[debian-lts-announce] 20190619 [SECURITY] [DLA 1827-1] gvfs security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00014.html"
            },
            {
              "name": "openSUSE-SU-2019:1699",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2019:1697",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html"
            },
            {
              "name": "USN-4053-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4053-1/"
            },
            {
              "name": "FEDORA-2019-6ed5523cc0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/"
            },
            {
              "name": "FEDORA-2019-e6b02af8b8",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/"
            },
            {
              "name": "RHSA-2019:3553",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3553"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-12795",
    "datePublished": "2019-06-11T21:07:32.000Z",
    "dateReserved": "2019-06-11T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:32:54.828Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2019:1697-1

CVE-2019-12447 (GCVE-0-2019-12447)

CVE-2019-12448 (GCVE-0-2019-12448)

CVE-2019-12449 (GCVE-0-2019-12449)

CVE-2019-12795 (GCVE-0-2019-12795)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour