{"schemaVersion":3,"id":"USN-4053-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"gvfs vulnerabilities\n\nIt was discovered that GVfs incorrectly handled the admin backend. Files\ncreated or moved by the admin backend could end up with the wrong ownership\ninformation, contrary to expectations. This issue only affected Ubuntu\n18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-12447, CVE-2019-12448,\nCVE-2019-12449)\n\nIt was discovered that GVfs incorrectly handled authentication on its\nprivate D-Bus socket. A local attacker could possibly connect to this\nsocket and issue D-Bus calls. (CVE-2019-12795)","dates":{"published":"2019-07-09T11:29:22.000Z","modified":"2026-02-10T04:41:34.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"gvfs","name":"gvfs","label":"gvfs","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/gvfs","purlType":"deb","versions":[{"text":"< 1.28.2-1ubuntu1~16.04.3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.36.1-0ubuntu1.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.2-1ubuntu1~16.04.3 | < 1.36.1-0ubuntu1.3.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4053-1","label":"ubuntu.com/security/notices/USN-4053-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-12447","label":"ubuntu.com/security/CVE-2019-12447","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-12448","label":"ubuntu.com/security/CVE-2019-12448","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-12449","label":"ubuntu.com/security/CVE-2019-12449","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-12795","label":"ubuntu.com/security/CVE-2019-12795","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2019-12447","CVE-2019-12448","CVE-2019-12449","CVE-2019-12795"],"downstream":[],"duplicates":[],"related":["CVE-2019-12447","CVE-2019-12448","CVE-2019-12449","CVE-2019-12795"]},"timeline":[{"kind":"published","date":"2019-07-09T11:29:22.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T04:41:34.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:02:35.131Z","stale":false,"partial":false}}