GVfs vulnerabilities allow remote information disclosure and denial of service
Original title: USN-8970-1: GVfs vulnerabilities
GVfs mishandling of SFTP, AFP and MTP data could let remote attackers obtain sensitive information or cause denial of service.
It was discovered that GVfs did not properly validate data returned by an SFTP server. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-84267) It was discovered that GVfs did not properly validate the size of replies from an AFP server. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-84269) It was discovered that GVfs did not properly validate the size of data returned by an MTP device. An attacker with a malicious MTP device could possibly use this issue to cause a denial of service. (CVE-2026-84270)
- GVfs mishandles SFTP replies leading to information disclosure
- GVfs mishandles AFP reply size allowing denial of service
- GVfs mishandles MTP data size allowing denial of service
Impact: remote information disclosure and denial of service
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-84267 | SFTP backend in gvfs: When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer with a certain length but the… | 4.3 | <1% | ||
| CVE-2026-84269 | AFP backend in gvfs: When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by… | 6.5 | <1% | ||
| CVE-2026-84270 | MTP backend in gvfs: When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data length returned by the device… | 4.3 | <1% |
From the original article
It was discovered that GVfs did not properly validate data returned by an SFTP server. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-84267) It was discovered that GVfs did not properly validate the size of replies from an AFP server.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.