Published: 06/02/2019 Updated: 29/09/2021

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.3 | Impact Score: 3.4 | Exploitability Score: 0.9

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

It exists that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome gnome-shell
opensuse leap 15.0
opensuse leap 15.1
opensuse leap 42.3
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10

Synopsis Moderate: GNOME security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for GNOME is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ...

Debian Bug report logs - #921490 gnome-shell: CVE-2019-3820 Package: src:gnome-shell; Maintainer for src:gnome-shell is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 6 Feb 2019 05:03:05 UTC Severity: important Tags: security ...

GNOME Shell could be made to execute keyboard shortcuts and other actions while the workstation was locked ...

It was discovered that the gnome-shell lock screen since version 31591 did not properly restrict all contextual actions An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions (CVE-2019-3820) ...

Impact: Moderate Public Date: 2019-02-05 CWE: CWE-285 Bugzilla: 1669391: CVE-2019-3820 gnome-shell: par ...

A partial screen lock bypass via keybindings has been found in gdm <= 3302, allowing a local attacker to unlock a session under certain circumstances ...

CWE-287 https://gitlab.gnome.org/GNOME/gnome-shell/issues/851 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3820 https://usn.ubuntu.com/3966-1/http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00023.html http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00049.html https://access.redhat.com/errata/RHSA-2020:1021 https://usn.ubuntu.com/3966-1/https://nvd.nist.gov

CVE-2019-3820

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect