NetSight
IP …
critical9.8

CVE-2019-12450

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress.

Impact

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

Affected products

VendorProductAffected versions
GnomeGlib
from 2.15.0 through 2.61.1
DebianDebian Linux
Version 8.0
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Eus
Versions 8.1, 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4, 8.6
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 18.10, 19.04
OpensuseLeap
Version 15.0
FedoraprojectFedora
Version 30

Weakness classification

CWE-276CWE-362

References