7.5
CVSSv2

CVE-2019-12450

Published: 29/05/2019 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 up to and including 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnome glib

debian debian linux 8.0

redhat enterprise linux 8.0

redhat enterprise linux eus 8.1

redhat enterprise linux eus 8.2

redhat enterprise linux server tus 8.2

redhat enterprise linux server aus 8.2

redhat enterprise linux server tus 8.4

redhat enterprise linux eus 8.4

redhat enterprise linux server aus 8.4

redhat enterprise linux server aus 8.6

redhat enterprise linux server tus 8.6

redhat enterprise linux eus 8.6

canonical ubuntu linux 18.04

canonical ubuntu linux 18.10

canonical ubuntu linux 19.04

canonical ubuntu linux 14.04

canonical ubuntu linux 16.04

canonical ubuntu linux 12.04

opensuse leap 15.0

fedoraproject fedora 30

Vendor Advisories

Debian Bug report logs - #929753 glib20: CVE-2019-12450 Package: src:glib20; Maintainer for src:glib20 is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 30 May 2019 13:33:02 UTC Severity: grave Tags: security, upstream Fou ...
Debian Bug report logs - #931234 glib20: CVE-2019-13012: keyfile settings backend: Consider tightening permissions Package: src:glib20; Maintainer for src:glib20 is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 28 Jun 2019 ...
GLib could be made to expose sensitive information if it received a specially crafted file ...
GLib could be made to expose sensitive information if it received a specially crafted file ...
Краткий обзор Moderate: glib2 and ibus security and bug fix update Тип/Серьезность Security Advisory: Moderate Тема An update for glib2 and ibus is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderat ...
Synopsis Moderate: glib2 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for glib2 is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ...
Synopsis Low: OpenShift Container Platform 4340 security and bug fix update Type/Severity Security Advisory: Low Topic An update is now available for Red Hat OpenShift Container Platform 43Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring S ...
Synopsis Moderate: security update - Red Hat Ansible Tower 36 runner release (CVE-2019-18874) Type/Severity Security Advisory: Moderate Topic Red Hat Ansible Tower 36 runner release (CVE-2019-18874) Description Updated python-psutil version to 566 inside ansible-runner container(CVE-20 ...
Synopsis Moderate: security update - Red Hat Ansible Tower 37 runner release (CVE-2019-18874) Type/Severity Security Advisory: Moderate Topic Red Hat Ansible Tower 37 runner release (CVE-2019-18874) Description Updated python-psutil version to 566 inside ansible-runner container (CVE-2 ...
Synopsis Moderate: OpenShift Container Platform 461 image security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 46Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...
file_copy_fallback in gio/gfilec in GNOME GLib does not properly restrict file permissions while a copy operation is in progress Instead, default permissions are used(CVE-2019-12450) ...
file_copy_fallback in gio/gfilec in GNOME GLib 2561 does not properly restrict file permissions while a copy operation is in progress Instead, default permissions are used (CVE-2019-12450) ...
file_copy_fallback in gio/gfilec in GNOME GLib 2150 through 2611 does not properly restrict file permissions while a copy operation is in progress Instead, default permissions are used (CVE-2019-12450) ...
Impact: Important Public Date: 2019-05-23 CWE: CWE-552 Bugzilla: 1719141: CVE-2019-12450 glib2: file_co ...