Vulnerabilities

TI-2020-16907 CVE-2020-27837 · GHSA-xpm4-75c2-wrgc

Race condition in gdm

LOW 28

A flaw was found in GDM in versions prior to 3.38.2.1.

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00228 Published 2020-12-28 Partial fix · 3.38.2.1 CWE-362

TI-2020-12684 CVE-2020-16125 · GHSA-pc8h-hq5p-vf38

gdm3 would start gnome-initial-setup if it cannot contact accountservice

LOW 34

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an…

CVSS 3.1HIGH 7.2 Physical Low privileges User interaction EPSS 0.01109 Published 2020-11-10 Partial fix · 3.36.4, 3.38.2 CWE-754

TI-2016-09276 CVE-2016-1000002 · GHSA-fpm9-2p3f-w4mm

gdm3 3.14.2 and possibly later has an information leak before screen lock

LOW 13

gdm3 3.14.2 and possibly later has an information leak before screen lock

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00549 Published 2019-11-05 Will not fix CWE-200

TI-2019-02837 CVE-2019-3825 · GHSA-pfhm-wwqj-c296

Improper authentication in Gnome Projectr gdm

LOW 29

A vulnerability was discovered in gdm before 3.31.4.

CVSS 3.0MEDIUM 6.4 Physical No auth No interaction EPSS 0.00508 Published 2019-02-06 Partial fix CWE-287

TI-2018-10342 CVE-2018-14424 · GHSA-c4j5-hwcp-h2qq

The daemon in GDM through 3.29.1 does not properly unexport display objects from its…

LOW 35

The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00536 Published 2018-08-14 Will not fix CWE-416

TI-2017-08954 CVE-2017-12164 · GHSA-87vr-968r-r3qp

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once…

LOW 29

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin.

CVSS 3.0MEDIUM 6.4 Physical No auth No interaction EPSS 0.00385 Published 2018-07-26 No fix listed CWE-592

TI-2015-06234 CVE-2015-7496 · GHSA-qwh9-f2h4-mw38

GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass…

LOW 32

GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00406 Published 2015-11-24 Fixed CWE-264

TI-2013-05939 CVE-2013-7273 · GHSA-2w7j-hchq-jpj6

GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true…

LOW 11

GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00368 Published 2014-04-29 No fix listed

TI-2013-03642 CVE-2013-4169 · GHSA-j642-2qgg-v4wq

GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of…

LOW 31

GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00371 Published 2013-09-10 Fixed CWE-59

TI-2010-02293 CVE-2010-2387 · GHSA-748g-m8cr-v48g

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when…

LOW 11

vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00524 Published 2012-12-21 Will not fix CWE-255

Vulnerabilities

Filters