Skip to content
Threat Feed
Subscribe

Product

Gvfs

2 briefs RSS
high advisory

Local Privilege Escalation in gvfsd-admin via TOCTOU Race Condition

A Time-of-Check Time-of-Use (TOCTOU) race condition in the gvfsd-admin daemon allows local attackers to perform privilege escalation by manipulating symbolic links to modify ownership of arbitrary system files.

gvfs privilege-escalation linux gnome
1t 1c
high threat

Heap-Based Buffer Overflow in gvfs SFTP Backend

The gvfsd-sftp process contains a heap-based buffer overflow vulnerability that allows a malicious SFTP server to corrupt memory via crafted file read responses.

exploited gvfs vulnerability memory-corruption linux
1c