DeutschShown in its original language — a full translation is planned for a future version.
GNOME: Mehrere Schwachstellen
view advisory published 2019-05-30
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNOME ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsmechanismen zu umgehen oder einen Denial of Service Zustand hervorzurufen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12450US | critical9.8OT elevated | — | ||
file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permission… | ||||
| CVE-2019-12449US | medium5.7 | — | ||
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METAD… | ||||
| CVE-2019-12448US | high8.1 | — | ||
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write. | ||||
| CVE-2019-12447US | high7.3 | — | ||
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2019:3530 vom 2019-11-05external
- Red Hat Security Advisory RHSA-2020:1766 vom 2020-04-28external
- Red Hat Security Advisory RHSA-2020:3194 vom 2020-07-28external
- Red Hat Security Advisory RHSA-2020:3978 vom 2020-09-29external
- Amazon Linux Security Advisory ALAS-2023-1742 vom 2023-05-04external
- AVAYA Security Advisory ASA-2020-125 vom 2020-10-15external
- National Vulnerability Database CVE-2019-12447 vom 2019-05-30external
- National Vulnerability Database CVE-2019-12448 vom 2019-05-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan