Lucene search

K
mageiaGentoo FoundationMGASA-2017-0248
HistoryAug 08, 2017 - 1:16 a.m.

Updated gdm packages fix security vulnerability

2017-08-0801:16:24
Gentoo Foundation
advisories.mageia.org
6

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

26.7%

It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is locked, possibly bypassing the locked screen (CVE-2015-7496).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchgdm< 3.14.2-5.1gdm-3.14.2-5.1.mga5

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

26.7%