Security update for gnome-shell (moderate)

openSUSE Security Update: Security update for gnome-shell Announcement ID: openSUSE-SU-2019:1529-1 Rating: moderate References: 1124493 Cross-References: CVE-2019-3820 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...

SUSE SLED12 / SLES12 Security Update : gnome-shell (SUSE-SU-2019:1390-1)

This update for gnome-shell fixes the following issues : Security issue fixed : CVE-2019-3820: Fixed a partial lock screen bypass bsc1124493. Fixed bugs: Remove sessionList of endSessionDialog for security reasons jscSLE-6660. Note that Tenable Network Security has extracted the preceding...

[ASA-201903-3] gdm: access restriction bypass

Arch Linux Security Advisory ASA-201903-3 ========================================= Severity: High Date : 2019-03-03 CVE-ID : CVE-2019-3820 CVE-2019-3825 Package : gdm Type : access restriction bypass Remote : No Link : https://security.archlinux.org/AVG-879 Summary ======= The package gdm before...

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

CVE-2019-3820

Technical details about CVE-2019-3820 are not publicly available in the provided Connected documents. The description mentions physical access and GNOME lock screen behavior. No remediation or affected versions are confirmed here. Monitor for updates from official advisories.

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

UBUNTU-CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3820-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3820-1 advisory. Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could...

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3820-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3820-2 advisory. USN-3820-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3820-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3820-3 advisory. Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could...

Ubuntu: Security Advisory (USN-3820-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3820-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3820-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Elastic Kibana 'CVE-2018-3820' Cross-Site Scripting (XSS) Vulnerability - Windows

Elastic Kibana versions have a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana 'CVE-2018-3820' Cross-Site Scripting (XSS) Vulnerability - Linux

Elastic Kibana versions have a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian DSA-3820-1 : gst-plugins-good1.0 - security update

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian Security Advisory DSA 3820-1 (gst-plugins-good1.0 - security update)

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened. OpenVAS Vulnerability Test $Id: deb3820.nasl 6607 2017-07-07 12:04:25Z cfisch...

Debian: Security Advisory (DSA-3820-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3820

CVE-2017-3820 affects Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE (releases 3.13.6S, 3.16.2S, or 3.17.1S). The vulnerability arises from an incorrect initialized variable in SNMP handling, allowing an authenticated, remote attacker to trigger high CPU usage and DoS via...