558 matches found
USN-3892-1 gdm3 vulnerability
Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user...
DEBIAN-CVE-2018-20781
In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...
UBUNTU-CVE-2018-20781
In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...
DEBIAN-CVE-2019-3825
A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session...
UBUNTU-CVE-2019-3825
A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session...
Debian DSA-4270-1 : gdm3 - security update
Chris Coulson discovered a use-after-free flaw in the GNOME Display Manager, triggerable by an unprivileged user via a specially crafted sequence of D-Bus method calls, leading to denial of service or potentially the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive te...
[SECURITY] [DSA 4270-1] gdm3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4270-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 13, 2018 https://www.debian.org/security/faq -...
USN-3737-1 gdm3 vulnerability
A use-after-free was discovered in GDM. A local user could exploit this to cause a denial of service, or potentially execute arbitrary code as the administrator...
UBUNTU-CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code...
DEBIAN-CVE-2018-14345
An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and...
UBUNTU-CVE-2018-14345
An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and...
The vulnerability of the Simple Desktop Display Manager, a screen manager for the Fedora operating system, allows a hacker to gain root privileges.
The vulnerability of the Simple Desktop Display Manager SDDM on the Fedora operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain root privileges...
CVE-2014-7272
Simple Desktop Display Manager SDDM before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance exploitation requires the user to win a race condition in the...
UBUNTU-CVE-2014-7271
Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...
DEBIAN-CVE-2014-7272
Simple Desktop Display Manager SDDM before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance exploitation requires the user to win a race condition in the...
DEBIAN-CVE-2014-7271
Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...
CVE-2014-7271
Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...
CVE-2014-7271: Missing Authentication for Critical Function
Simple Desktop Display Manager SDDM before 0.10.0 allows local users to log in as user "sddm" without authentication...
CVE-2014-7272: Undefined Security Weakness
Simple Desktop Display Manager SDDM before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance exploitation requires the user to win a race condition in the...
