CVE-2026-84269
Received Received - Intake

Heap Buffer Overflow in GNOME gvfs AFP Backend

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: redhat-SADP

Description
A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the pre-sized reply buffer, causing the operation to access past the intended boundaries. This issue allows a malicious server to overflow a heap buffer and crash the gvfsd-afp process, resulting in a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-01
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-84269
EUVD
EUVD-2026-69297

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gnome gvfs *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the AFP backend of gvfs, a virtual file system for GNOME. When a user mounts a share from a malicious AFP server, the server can send a response with a length that exceeds what the client requested. The client's code does not check this length against the allocated buffer, allowing the server to write data beyond the intended memory area. This causes a heap buffer overflow, crashing the gvfsd-afp process and leading to a denial of service.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes in the gvfsd-afp process or unusual network traffic patterns when mounting AFP shares. Check system logs for gvfsd-afp crashes or heap corruption errors. Use network monitoring tools like tcpdump or Wireshark to inspect AFP protocol traffic for malformed length values in DSI read responses. Ensure gvfs is updated to version 1.60.2 or later to mitigate the issue.

Impact Analysis

If you connect to an untrusted AFP server, a malicious actor could exploit this flaw to crash your file manager or applications using gvfs. This would disrupt your ability to access network shares or local files temporarily. No data theft or modification is mentioned, but repeated crashes could make the system unstable.

Compliance Impact

This vulnerability primarily causes a denial of service by crashing the gvfsd-afp process, which does not directly impact data confidentiality or integrity. However, compliance with standards like GDPR or HIPAA could be indirectly affected if the DoS disrupts critical services handling personal or health data, leading to potential availability violations.

Mitigation Strategies

Disable AFP shares if not in use. Update gvfs to the latest patched version. Monitor network traffic for unexpected AFP server responses. Restrict access to AFP services to trusted networks only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84269. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart