ArchLinuxASA-202011-5[ASA-202011-5] gdm: privilege escalation
6.8 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
34.9%
Arch Linux Security Advisory ASA-202011-5
Severity: High
Date : 2020-11-10
CVE-ID : CVE-2020-16125
Package : gdm
Type : privilege escalation
Remote : No
Link : https://security.archlinux.org/AVG-1264
Summary
The package gdm before version 3.38.2-1 is vulnerable to privilege
escalation.
Resolution
Upgrade to 3.38.2-1.
pacman -Syu “gdm>=3.38.2-1”
The problem has been fixed upstream in version 3.38.2.
Workaround
None.
Description
gdm before 3.38.2 can be tricked into launching gnome-initial-setup,
enabling an unprivileged user to create a new user account for
themselves. The new account is a member of the sudo group, so this
enables the unprivileged user to obtain admin privileges.
Impact
An unprivileged local user might be able to elevate privileges to root.
References
https://gitlab.gnome.org/GNOME/gdm/-/issues/642
https://security.archlinux.org/CVE-2020-16125
Related
6.8 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
34.9%