CVE-2019-12448: Race Condition
Published May 29, 2019
·Updated
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement queryinfoonread/write.
Affected Software
20 affected componentsFixes available
Gnome gvfs>=1.29.4<=1.41.2
debian/gvfs
1.46.2-11.50.3-11.57.2-21.58.0-21.59.1-1
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.40.2-r0
1.40.2-r0
alpine/gvfs>=1.29.4<1.34.1-r1
1.34.1-r1
alpine/gvfs>=1.29.4<1.36.1-r1
1.36.1-r1
alpine/gvfs>=1.29.4<1.36.2-r1
1.36.2-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gvfsto a version that resolves this vulnerability.Fixed in 1.46.2-1Fixed in 1.50.3-1Fixed in 1.57.2-2Fixed in 1.58.0-2Fixed in 1.59.1-1
Event History
May 29, 2019
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·05:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-12448.
2
What is the severity of CVE-2019-12448?
The severity of CVE-2019-12448 is high with a CVSS score of 8.1.
3
What is the affected software?
The affected software is GNOME gvfs versions 1.29.4 through 1.41.2.
4
What is the fix for this vulnerability?
The fix for this vulnerability depends on the software version. Refer to the remediation information provided by your software vendor.
5
Are there any references related to CVE-2019-12448?
Yes, you can find more information about CVE-2019-12448 in the following references: [1] [2] [3]