Описание
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is locked, possibly bypassing the locked screen.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | gdm | Not affected | ||
| Red Hat Enterprise Linux 6 | gdm | Not affected | ||
| Red Hat Enterprise Linux 7 | gdm | Fixed | RHSA-2017:2128 | 01.08.2017 |
| Red Hat Enterprise Linux 7 | gnome-session | Fixed | RHSA-2017:2128 | 01.08.2017 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.3 Medium
CVSS3
4.6 Medium
CVSS2
Связанные уязвимости
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate ...
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
ELSA-2017-2128: gdm and gnome-session security, bug fix, and enhancement update (MODERATE)
EPSS
4.3 Medium
CVSS3
4.6 Medium
CVSS2