Summary
It was discovered that GNOME Keyring incorrectly cleared out credentials
supplied to the PAM module. A local attacker could possibly use this issue
to discover login credentials.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | gnome-keyring | 3.10.1-1ubuntu4.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | gnome-keyring | 3.18.3-0ubuntu2.1 |
Vulnerabilities 1
-
Unscored —
In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned …
References
-
report
https://ubuntu.com/security/CVE-2018-20781