GVfs

Mentions · 7d0
Mentions · 30d1
All mentions2
First seenSep 30, 2026
Last mentioned8d ago

Timeline

2 articles · newest first

GVfs vulnerabilities allow remote information disclosure and denial of service

GVfs mishandling of SFTP, AFP and MTP data could let remote attackers obtain sensitive information or cause denial of service.

Ubuntu Security NoticesNov 3, 14:06 UTC · 8d agoVulnerabilityCVE-2026-84267 CVE-2026-84269 CVE-2026-842701

USN-8845-1: GVfs vulnerabilities

Ubuntu warns of two GVfs flaws: malicious SFTP input may yield code execution, and a local bug can grant root.

Ubuntu Security NoticesSep 30, 15:54 UTC · Sep 30, 2026VulnerabilityCVE-2026-84268 CVE-2026-889242

Related CVEs

by mentions

CVE-2026-84268<1%8.8
Heap Buffer Overflow in GNOME gvfs SFTP Backend via Malicious SFTP Server
published Sep 1, 2026GNOME (packaged by Red Hat and other Linux distributors) gvfs — SFTP backend (gvfsd-sftp)
CVE-2026-889247.0
TOCTOU symlink race in gvfs gvfsd-admin daemon allows local privilege escalation to root
published Sep 10, 2026GNOME gvfs (gvfsd-admin daemon / admin backend)
CVE-2026-84269<1%6.5
AFP backend in gvfs: When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by…
published Sep 1, 2026
CVE-2026-84270<1%4.3
MTP backend in gvfs: When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data length returned by the device…
published Sep 1, 2026
CVE-2026-84267<1%4.3
SFTP backend in gvfs: When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer with a certain length but the…
published Sep 1, 2026

Appears with

Ubuntuproduct · 1
Canonicalvendor · 1
Ubuntuvendor · 1
GNOMEvendor · 1
Canonicalorganization · 1
Ubuntuorganization · 1

Entities are extracted by the model from each article. First seen Sep 30, 2026, last mentioned 8d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.