Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-43090 EUVD-2023-47511GHSA-6wp3-hhxh-4vfp

Gnome-shell: screenshot tool allows viewing open windows when session is locked

Published Sep 22, 2023 · Updated Aug 2, 2024 · Assigned by fedora

Description

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.

Affected products

VendorProductAffectedFixed
— gnome-shell < 42.*, 43.0 – < 43.9, 44.0 – < 44.5 42.*

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 gnome-shell 44.5-1 —
Debian 13 gnome-shell 44.5-1 —
Debian 12 gnome-shell 43.6-1~deb12u2 DSA-5501-1
ReleasePackageFixed inAdvisory
SLES 15 SP6 gnome-shell 45.3-150600.5.6.1 SUSE-SU-2024:2576-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed gnome-shell 45.0-2.1 openSUSE-SU-2024:13251-1
openSUSE Leap 15.6 gnome-shell 45.3-150600.5.6.1 SUSE-SU-2024:2576-1

Advisories 4

References