CVE-2019-12448

Name of the Vulnerable Software and Affected Versions GNOME gvfs versions 1.29.4 through 1.41.2

Description The issue is caused by a race condition in the daemon/gvfsbackendadmin.c component of the GVFS subsystem in the GNOME desktop environment for Linux operating systems. This occurs due to concurrent execution using a shared resource with incorrect synchronization, allowing a remote attacker to potentially impact the integrity, confidentiality, and availability of protected information.

Recommendations For versions 1.29.4 through 1.41.2, consider disabling the admin backend functionality in daemon/gvfsbackendadmin.c as a temporary workaround until a patch is available. Restrict access to the vulnerable GVFS subsystem to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.