Debian/gvfs: high 7.8
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attac
Action: Upgrade gvfs to 1.38.1-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.38.1-5 | - |
Fixed versions
| 1.38.1-5 |
Sources
- osv: DEBIAN-CVE-2019-12795#Debian:13/gvfs
- https://security-tracker.debian.org/tracker/CVE-2019-12795
published · modified · JSON