gnome gnome keyring vulnerabilities and exploits

(subscribe to this query)

4.4

CVSSv2

GNOME gnome-keyring 3.4.0 up to and including 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows malicious users to have an unspecified impact via unknown attack vectors.

Gnome Gnome-keyring 3.4.1 Gnome Gnome-keyring 3.4.0

5

CVSSv2

gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function

Gnome Gnome Keyring 3.2 Gnome Gnome Keyring 3.4 Debian Debian Linux 8.0 Debian Debian Linux 9.0

2.1

CVSSv2

GNOME Keyring up to and including 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, a similar issue to CVE-2008-7320. One perspective is that this occurs because available D-Bus protection mec...

Gnome Gnome-keyring

1 Github repository

2.1

CVSSv2

In pam/gkr-pam-module.c in GNOME Keyring prior to 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext.

Gnome Gnome Keyring Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Oracle Zfs Storage Appliance Kit 8.8

1 Github repository

2.1

CVSSv2

GNOME Seahorse up to and including 3.30 allows physically proximate malicious users to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents...

Gnome Seahorse

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook