Search for packages
| purl | pkg:deb/debian/gvfs@1.38.1-5 |
| Next non-vulnerable version | 1.50.3-1+deb12u1 |
| Latest non-vulnerable version | 1.57.2-2+deb13u1 |
| Risk | 1.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-n7zf-vpph-nygr
Aliases: CVE-2026-28295 |
gvfs: GVfs FTP backend: Information disclosure via untrusted PASV responses |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-yxx6-d283-a7cu
Aliases: CVE-2026-28296 |
gvfs: FTP GVfs backend: Arbitrary FTP command injection via CRLF sequences in file paths |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-aw2w-qkay-vycd | gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password |
CVE-2019-3827
|
| VCID-ex2c-73nv-wkd7 | gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c |
CVE-2019-12447
|
| VCID-tvv8-29d2-hugb | gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges |
CVE-2019-12449
|
| VCID-wgka-2er4-abd6 | gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd |
CVE-2019-12795
|
| VCID-wjfz-3svt-akdp | gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write |
CVE-2019-12448
|