Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnome gnome display manager vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-7273
GNOME Display Manager (gdm) 3.4.1 and previous versions, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name.
Gnome Gnome Display Manager 3.2.1.1Gnome Gnome Display Manager 3.2.1Gnome Gnome Display Manager 3.3.92Gnome Gnome Display Manager 3.3.92.1Gnome Gnome Display Manager 3.1.91Gnome Gnome Display Manager 3.2.0Gnome Gnome Display ManagerGnome Gnome Display Manager 3.4.0Gnome Gnome Display Manager 3.0.2Gnome Gnome Display Manager 3.0.3Gnome Gnome Display Manager 3.0.4Gnome Gnome Display Manager 3.1.2Gnome Gnome Display Manager 3.0.0Gnome Gnome Display Manager 3.1.90Gnome Gnome Display Manager 3.1.92Gnome Gnome Display Manager 3.4.0.1
NA
CVE-2010-2387
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x prior to 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
Gnome Gnome Display Manager 2.20.3Gnome Gnome Display Manager 2.20.4Gnome Gnome Display Manager 2.20.0Gnome Gnome Display Manager 2.20.7Gnome Gnome Display Manager 2.20.8Gnome Gnome Display Manager 2.20.1Gnome Gnome Display Manager 2.20.2Gnome Gnome Display Manager 2.20.9Gnome Gnome Display Manager 2.20.10Gnome Gnome Display Manager 2.20.5Gnome Gnome Display Manager 2.20.6
6.4
CVSSv3
CVE-2020-27837
A flaw was found in GDM in versions before 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requ...
Gnome Gnome Display Manager
7.8
CVSSv3
CVE-2018-14424
The daemon in GDM up to and including 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local malicious user to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial ...
Gnome Gnome Display Manager
6.8
CVSSv3
CVE-2020-16125
gdm3 versions prior to 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to cr...
Gnome Gnome Display Manager
6.4
CVSSv3
CVE-2017-12164
A flaw exists in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.
Gnome Gnome Display Manager 3.24.1
6.4
CVSSv3
CVE-2019-3825
A vulnerability exists in gdm prior to 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
Gnome Gnome Display ManagerCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Redhat Enterprise Linux 7.0
2.4
CVSSv3
CVE-2016-1000002
gdm3 3.14.2 and possibly later has an information leak before screen lock
Gnome Gnome Display Manager 3.14.2Redhat Enterprise Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 10.0Debian Debian Linux 9.0Opensuse Leap 42.2
NA
CVE-2011-0727
GNOME Display Manager (gdm) 2.x prior to 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
Gnome Gdm 2.2Gnome Gdm 2.3Gnome Gdm 2.16Gnome Gdm 2.17Gnome Gdm 2.0Gnome Gdm 2.14Gnome Gdm 2.15Gnome Gdm 2.22Gnome Gdm 2.23Gnome Gdm 2.30Gnome Gdm 2.31Gnome Gdm 2.4Gnome Gdm 2.5Gnome Gdm 2.6Gnome Gdm 2.18Gnome Gdm 2.19Gnome Gdm 2.26Gnome Gdm 2.27Gnome Gdm 2.8Gnome Gdm 2.13Gnome Gdm 2.20Gnome Gdm 2.21
NA
CVE-2009-2697
The Red Hat build script for the GNOME Display Manager (GDM) prior to 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote malicious users to bypass intended access restrictions via XDMCP connections, a different vulnerability than CV...
Gnome Gdm 2.14Gnome Gdm 2.13Gnome Gdm 1.0Gnome Gdm 0.7Gnome Gdm 2.8Gnome Gdm 2.6Gnome GdmGnome Gdm 2.15Gnome Gdm 2.2Gnome Gdm 2.0Gnome Gdm 2.5Gnome Gdm 2.4Gnome Gdm 2.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook