CVE-2019-12795

26

FAUCET Score

CVE-2019-12795 describes a vulnerability in GNOME gvfs versions before 1.38.3, 1.40.2, and 1.41.3, where the gvfsd daemon opened a D-Bus server socket without proper authorization. This allows a local attacker to connect to the socket and issue D-Bus method calls. The vulnerability has a CVSS score of 7.8 (HIGH), indicating a high impact on confidentiality, integrity, and availability, with low attack complexity and requiring low privileges. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 1.38.3CPE matchmatch criteria	cpe:2.3:a:gnome:gvfs::::::::
		>= 1.40.0, < 1.40.2CPE matchmatch criteria	cpe:2.3:a:gnome:gvfs::::::::
		>= 1.41.0, < 1.41.3CPE matchmatch criteria	cpe:2.3:a:gnome:gvfs::::::::

CVSS Data

CVSS version used by this source: 3.0

7.8HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.0

Exploit Intelligence

EPSS Score

0.39%

Probability of exploitation in next 30 days

EPSS Percentile

31.4%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0039 is in the 71st percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (30)

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: accountsservice-0:0.6.50-7.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: appstream-data-0:8-20190805.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: baobab-0:3.28.0-2.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: chrome-gnome-shell-0:10.1-6.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: evince-0:3.28.4-3.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: file-roller-0:3.28.1-2.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gdk-pixbuf2-0:2.36.12-5.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gdm-1:3.28.3-22.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gjs-0:1.56.2-3.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gnome-control-center-0:3.28.2-5.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gnome-desktop3-0:3.32.2-1.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gnome-remote-desktop-0:0.1.6-5.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gnome-settings-daemon-0:3.32.0-4.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gnome-shell-0:3.32.2-9.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gnome-shell-extensions-0:3.32.1-10.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gnome-software-0:3.30.6-2.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gnome-tweaks-0:3.28.1-6.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gsettings-desktop-schemas-0:3.32.0-3.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gtk3-0:3.22.30-4.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: gvfs-0:1.36.2-6.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: mozjs60-0:60.9.0-3.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: mutter-0:3.32.2-10.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: nautilus-0:3.28.1-10.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: pango-0:1.42.4-6.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: pidgin-0:2.13.0-5.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: plymouth-0:0.9.3-15.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: SDL-0:1.2.15-35.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: wayland-protocols-0:1.17-1.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: webkit2gtk3-0:2.24.3-1.el8

redhatvendor investigatingvia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: gvfs

Vendor Advisories (1)

redhatCVE-2019-12795Low

gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd

References

lists.opensuse.org / opensuse-security-announce/2019-07/msg00008.html

lists.opensuse.org / opensuse-security-announce/2019-07/msg00009.html

access.redhat.com / errata/RHSA-2019:3553

gitlab.gnome.org / GNOME/gvfs/commit/70dbfc68a79faac49bd3423e079cb6902522082a

PatchVendor Advisory

gitlab.gnome.org / GNOME/gvfs/commit/d8c9138bf240975848b1c54db648ec4cd516a48f

PatchVendor Advisory

gitlab.gnome.org / GNOME/gvfs/commit/e3808a1b4042761055b1d975333a8243d67b8bfe

PatchVendor Advisory

lists.debian.org / debian-lts-announce/2019/06/msg00014.html

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2

usn.ubuntu.com / 4053-1

securityfocus.com / bid/108741