SB2019022709 - OpenSUSE Linux update for gvfs
Published: February 27, 2019 Updated: April 26, 2019
Security Bulletin ID
SB2019022709
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Security restrictions bypass (CVE-ID: CVE-2019-3827)
The vulnerability allows a local attacker to escalate privileges on the system.
The vulnerability exists due to incorrect permission check in the admin backend. A local attacker can run malicious programs under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge.
Remediation
Install update from vendor's website.