High severity7.3NVD Advisory· Published May 29, 2019· Updated Jun 17, 2026
CVE-2019-12447
CVE-2019-12447
Description
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22- GNOME/gvfsdescription
- Range: 1.29.4 - 1.41.2
- osv-coords20 versionspkg:rpm/almalinux/accountsservice-develpkg:rpm/almalinux/baobabpkg:rpm/almalinux/clutterpkg:rpm/almalinux/clutter-develpkg:rpm/almalinux/clutter-docpkg:rpm/almalinux/gjs-develpkg:rpm/almalinux/gnome-menuspkg:rpm/almalinux/gnome-menus-develpkg:rpm/almalinux/gnome-tweakspkg:rpm/almalinux/mozjs52pkg:rpm/almalinux/mozjs52-develpkg:rpm/almalinux/mozjs60pkg:rpm/almalinux/mozjs60-develpkg:rpm/almalinux/valapkg:rpm/almalinux/vala-develpkg:rpm/opensuse/gvfs&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/gvfs&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/gvfs&distro=openSUSE%20Tumbleweedpkg:rpm/suse/gvfs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015pkg:rpm/suse/gvfs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1
< 0.6.50-8.el8+ 19 more
- (no CPE)range: < 0.6.50-8.el8
- (no CPE)range: < 3.28.0-4.el8
- (no CPE)range: < 1.26.2-8.el8
- (no CPE)range: < 1.26.2-8.el8
- (no CPE)range: < 1.26.2-8.el8
- (no CPE)range: < 1.56.2-4.el8
- (no CPE)range: < 3.13.3-11.el8
- (no CPE)range: < 3.13.3-11.el8
- (no CPE)range: < 3.28.1-7.el8
- (no CPE)range: < 52.9.0-2.el8.alma
- (no CPE)range: < 52.9.0-2.el8.alma
- (no CPE)range: < 60.9.0-4.el8.alma
- (no CPE)range: < 60.9.0-4.el8
- (no CPE)range: < 0.40.19-1.el8
- (no CPE)range: < 0.40.19-1.el8
- (no CPE)range: < 1.34.2.1-lp150.3.10.1
- (no CPE)range: < 1.34.2.1-lp151.6.3.1
- (no CPE)range: < 1.48.1-1.3
- (no CPE)range: < 1.34.2.1-4.13.1
- (no CPE)range: < 1.34.2.1-4.13.1
Patches
Vulnerability mechanics
References
7- gitlab.gnome.org/GNOME/gvfs/commit/d7d362995aa0cb8905c8d5c2a2a4c305d2ffff80nvdPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.htmlnvdThird Party Advisory
- www.openwall.com/lists/oss-security/2019/07/09/3nvdMailing ListThird Party Advisory
- usn.ubuntu.com/4053-1/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/nvd
News mentions
0No linked articles in our index yet.