CVE-2019-3827

25.03.2019, 18:29

An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7 HIGH	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 19%

Affected Products (NVD)

Vendor	Product	Version
gnome	gvfs	𝑥 < 1.39.4

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

gvfs

bookworm	1.50.3-1 fixed
bullseye	1.46.2-1 fixed
jessie	not-affected
sid	1.56.1-1 fixed
stretch	no-dsa
trixie	1.56.1-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

gvfs

bionic	Fixed 1.36.1-0ubuntu1.3 released
cosmic	Fixed 1.38.1-0ubuntu1.2 released
trusty	dne
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

gvfs

suse enterprise desktop 15	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP2	1.42.2-4.24 fixed
suse enterprise desktop 15 SP3	1.42.2-4.24 fixed
suse enterprise desktop 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise desktop 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise desktop 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise desktop 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise sap 15	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP2	1.42.2-4.24 fixed
suse enterprise sap 15 SP3	1.42.2-4.24 fixed
suse enterprise sap 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise sap 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise sap 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise sap 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise server 15	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP2	1.42.2-4.24 fixed
suse enterprise server 15 SP3	1.42.2-4.24 fixed
suse enterprise server 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise server 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise server 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise server 15 SP7	1.52.2-150600.1.6 fixed

gvfs-backend-afc

suse enterprise desktop 15	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP2	1.42.2-4.24 fixed
suse enterprise desktop 15 SP3	1.42.2-4.24 fixed
suse enterprise desktop 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise desktop 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise desktop 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise desktop 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise sap 15	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP2	1.42.2-4.24 fixed
suse enterprise sap 15 SP3	1.42.2-4.24 fixed
suse enterprise sap 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise sap 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise sap 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise sap 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise server 15	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP2	1.42.2-4.24 fixed
suse enterprise server 15 SP3	1.42.2-4.24 fixed
suse enterprise server 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise server 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise server 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise server 15 SP7	1.52.2-150600.1.6 fixed

gvfs-backend-samba

suse enterprise desktop 15	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP2	1.42.2-4.24 fixed
suse enterprise desktop 15 SP3	1.42.2-4.24 fixed
suse enterprise desktop 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise desktop 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise desktop 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise desktop 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise sap 15	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP2	1.42.2-4.24 fixed
suse enterprise sap 15 SP3	1.42.2-4.24 fixed
suse enterprise sap 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise sap 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise sap 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise sap 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise server 15	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP2	1.42.2-4.24 fixed
suse enterprise server 15 SP3	1.42.2-4.24 fixed
suse enterprise server 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise server 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise server 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise server 15 SP7	1.52.2-150600.1.6 fixed

gvfs-backends

suse enterprise desktop 15	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP2	1.42.2-4.24 fixed
suse enterprise desktop 15 SP3	1.42.2-4.24 fixed
suse enterprise desktop 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise desktop 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise desktop 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise desktop 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise sap 15	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP2	1.42.2-4.24 fixed
suse enterprise sap 15 SP3	1.42.2-4.24 fixed
suse enterprise sap 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise sap 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise sap 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise sap 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise server 15	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP2	1.42.2-4.24 fixed
suse enterprise server 15 SP3	1.42.2-4.24 fixed
suse enterprise server 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise server 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise server 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise server 15 SP7	1.52.2-150600.1.6 fixed

gvfs-devel

suse enterprise desktop 15	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP2	1.42.2-4.24 fixed
suse enterprise desktop 15 SP3	1.42.2-4.24 fixed
suse enterprise desktop 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise desktop 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise desktop 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise desktop 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise sap 15	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP2	1.42.2-4.24 fixed
suse enterprise sap 15 SP3	1.42.2-4.24 fixed
suse enterprise sap 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise sap 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise sap 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise sap 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise server 15	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP2	1.42.2-4.24 fixed
suse enterprise server 15 SP3	1.42.2-4.24 fixed
suse enterprise server 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise server 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise server 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise server 15 SP7	1.52.2-150600.1.6 fixed

gvfs-fuse

suse enterprise desktop 15	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP2	1.42.2-4.24 fixed
suse enterprise desktop 15 SP3	1.42.2-4.24 fixed
suse enterprise desktop 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise desktop 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise desktop 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise desktop 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise sap 15	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP2	1.42.2-4.24 fixed
suse enterprise sap 15 SP3	1.42.2-4.24 fixed
suse enterprise sap 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise sap 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise sap 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise sap 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise server 15	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP2	1.42.2-4.24 fixed
suse enterprise server 15 SP3	1.42.2-4.24 fixed
suse enterprise server 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise server 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise server 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise server 15 SP7	1.52.2-150600.1.6 fixed

gvfs-lang

suse enterprise desktop 15	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise desktop 15 SP2	1.42.2-4.24 fixed
suse enterprise desktop 15 SP3	1.42.2-4.24 fixed
suse enterprise desktop 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise desktop 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise desktop 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise desktop 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise sap 15	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise sap 15 SP2	1.42.2-4.24 fixed
suse enterprise sap 15 SP3	1.42.2-4.24 fixed
suse enterprise sap 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise sap 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise sap 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise sap 15 SP7	1.52.2-150600.1.6 fixed
suse enterprise server 15	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP1	1.34.2.1-4.6.1 fixed
suse enterprise server 15 SP2	1.42.2-4.24 fixed
suse enterprise server 15 SP3	1.42.2-4.24 fixed
suse enterprise server 15 SP4	1.48.1-150400.2.17 fixed
suse enterprise server 15 SP5	1.48.2-150400.4.6.1 fixed
suse enterprise server 15 SP6	1.52.2-150600.1.6 fixed
suse enterprise server 15 SP7	1.52.2-150600.1.6 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

gvfs

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-afc

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-afp

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-archive

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-client

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-devel

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-fuse

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-goa

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-gphoto2

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-mtp

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-smb

RHEL 7	0:1.36.2-3.el7 fixed
RHEL 8	0:1.36.2-2.el8_0.1 fixed
RHEL 8.0 E4S	0:1.36.2-2.el8_0.1 fixed

gvfs-tests

RHEL 7

0:1.36.2-3.el7

fixed

Common Weakness Enumeration

CWE-863 - Incorrect Authorization
The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References

https://access.redhat.com/errata/RHSA-2019:1517

https://access.redhat.com/errata/RHSA-2019:2145

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3827

https://gitlab.gnome.org/GNOME/gvfs/merge_requests/31

https://access.redhat.com/errata/RHSA-2019:1517

https://access.redhat.com/errata/RHSA-2019:2145

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3827

https://gitlab.gnome.org/GNOME/gvfs/merge_requests/31