# CVE-2019-3827: gvfs: GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using Fi... CVE-2019-3827 is fixed in 16 products on 1 platform, first by gvfs 1.36.1-0ubuntu1.3, released February 10, 2019. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2019-3827 - Priority: High - CVSS: 7.0 (Moderate) - EPSS: 0.0036 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Feb 10, 2019 ## Description GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer. Security Fix(es): * gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password (CVE-2019-3827) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | gvfs RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs Ubuntu 18.04.6 LTS (bionic) | 1.36.1-0ubuntu1.3 | [gvfs 1.36.1-0ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gvfs-1.36.1-0ubuntu1.3.md) | Feb 10, 2019 | | Linux | gvfs ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-afc RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-afc ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-afp RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-afp ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-archive RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-archive ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-backends Ubuntu 18.04.6 LTS (bionic) | 1.36.1-0ubuntu1.3 | [gvfs-backends 1.36.1-0ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gvfs-backends-1.36.1-0ubuntu1.3.md) | Feb 10, 2019 | | Linux | gvfs-bin Ubuntu 18.04.6 LTS (bionic) | 1.36.1-0ubuntu1.3 | [gvfs-bin 1.36.1-0ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gvfs-bin-1.36.1-0ubuntu1.3.md) | Feb 10, 2019 | | Linux | gvfs-client RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-client ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-common Ubuntu 18.04.6 LTS (bionic) | 1.36.1-0ubuntu1.3 | [gvfs-common 1.36.1-0ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gvfs-common-1.36.1-0ubuntu1.3.md) | Feb 10, 2019 | | Linux | gvfs-daemons Ubuntu 18.04.6 LTS (bionic) | 1.36.1-0ubuntu1.3 | [gvfs-daemons 1.36.1-0ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gvfs-daemons-1.36.1-0ubuntu1.3.md) | Feb 10, 2019 | | Linux | gvfs-devel RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-devel ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-fuse RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-fuse Ubuntu 18.04.6 LTS (bionic) | 1.36.1-0ubuntu1.3 | [gvfs-fuse 1.36.1-0ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gvfs-fuse-1.36.1-0ubuntu1.3.md) | Feb 10, 2019 | | Linux | gvfs-fuse ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-goa RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-goa ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-gphoto2 RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-gphoto2 ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-libs Ubuntu 18.04.6 LTS (bionic) | 1.36.1-0ubuntu1.3 | [gvfs-libs 1.36.1-0ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gvfs-libs-1.36.1-0ubuntu1.3.md) | Feb 10, 2019 | | Linux | gvfs-mtp RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-mtp ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | | Linux | gvfs-smb RHEL 8 | 0:1.36.2-2.el8_0.1 | [RHSA-2019:1517](https://patchblox.com/security/data/fix/linux/rhsa-2019-1517.md) | Jun 18, 2019 | | Linux | gvfs-smb ol 8 | 0:1.36.2-2.el8_0.1 | [ELSA-2019-1517](https://patchblox.com/security/data/fix/linux/elsa-2019-1517.md) | Jul 30, 2019 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.