CVE-2019-3827 Missing authorization in gvfs
Privileged users can modify arbitrary system files without authentication if no agent is running, enabling privilege escalation in uncommon configurations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2019-3827?
CVE-2019-3827 is a high-severity missing authorization vulnerability in [UNKNOWN] gvfs, published on 25 Mar 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
Weakness: CWE-863
Which versions are affected by CVE-2019-3827?
It affects 1 product.
Linux distribution packages (40)
gvfs Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-afc Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-afp Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-archive Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-client Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-devel Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-fuse Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-goa Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-gphoto2 Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-mtp Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-smb Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs-tests Red Hat:enterprise_linux:7::client | All versions | 0:1.36.2-3.el7 |
gvfs Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-afc Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-afp Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-archive Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-client Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-fuse Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-goa Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-gphoto2 Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-mtp Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-smb Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs-tests Red Hat:enterprise_linux:7::computenode | All versions | 0:1.36.2-3.el7 |
gvfs Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-afc Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-afp Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-archive Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-client Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-devel Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-fuse Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-goa Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-gphoto2 Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-mtp Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-smb Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs-tests Red Hat:enterprise_linux:7::server | All versions | 0:1.36.2-3.el7 |
gvfs Red Hat:enterprise_linux:7::workstation | All versions | 0:1.36.2-3.el7 |
Products include Gnome Gvfs.
How do I fix CVE-2019-3827?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2019-3827 being exploited?
There is no known exploitation of CVE-2019-3827 in the wild and no public exploit code.
Other vulnerabilities in [UNKNOWN] gvfs
Sources
Also known as DEBIAN-CVE-2019-3827, GHSA-4782-6x7j-q79q, MGASA-2019-0080, RHSA-2019:1517, RHSA-2019:2145, SUSE-SU-2019:0438-1 and 3 more.