9 results · Feed
-
Unscored —
A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it po…
-
High 7.2CVE-2020-16125 Public exploit
gdm3 would start gnome-initial-setup if it cannot contact accountservice
gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a lo…
-
Unscored —
gdm3 3.14.2 and possibly later has an information leak before screen lock
-
Medium 6.3
A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could by…
-
Unscored —
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are dest…
-
Medium 4.1
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If a…
-
Unscored —
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding th…
-
Unscored —
GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a den…
-
Unscored —
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symli…