Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xpm4-75c2-wrgc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.

EPSS

Процентиль: 14%
0.00228
Низкий

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 6.4
ubuntu
почти 6 лет назад

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.

CVSS3: 6.3
redhat
почти 6 лет назад

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.

CVSS3: 6.4
nvd
почти 6 лет назад

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.

CVSS3: 6.4
debian
почти 6 лет назад

A flaw was found in GDM in versions prior to 3.38.2.1. A race conditio ...

CVSS3: 6.4
altlinux
почти 6 лет назад

ALT-PU-2020-3514: package `gdm` update to version 3.38.2.1-alt1

EPSS

Процентиль: 14%
0.00228
Низкий

Дефекты

CWE-362