Search for packages
| purl | pkg:deb/debian/gvfs@0.2.5-1.1 |
| Next non-vulnerable version | 1.50.3-1+deb12u1 |
| Latest non-vulnerable version | 1.57.2-2+deb13u1 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-aw2w-qkay-vycd
Aliases: CVE-2019-3827 |
gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password |
Affected by 2 other vulnerabilities. |
|
VCID-ex2c-73nv-wkd7
Aliases: CVE-2019-12447 |
gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c |
Affected by 2 other vulnerabilities. |
|
VCID-n7zf-vpph-nygr
Aliases: CVE-2026-28295 |
gvfs: GVfs FTP backend: Information disclosure via untrusted PASV responses |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-tvv8-29d2-hugb
Aliases: CVE-2019-12449 |
gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges |
Affected by 2 other vulnerabilities. |
|
VCID-wgka-2er4-abd6
Aliases: CVE-2019-12795 |
gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd |
Affected by 2 other vulnerabilities. |
|
VCID-wjfz-3svt-akdp
Aliases: CVE-2019-12448 |
gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write |
Affected by 2 other vulnerabilities. |
|
VCID-yxx6-d283-a7cu
Aliases: CVE-2026-28296 |
gvfs: FTP GVfs backend: Arbitrary FTP command injection via CRLF sequences in file paths |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||