CVE-2020-27837

CVE-2020-27837 affects GNOME Display Manager (GDM) versions before 3.38.2.1. The vulnerability is a race condition in how session shutdown is handled, allowing a user with autologin enabled to bypass the lock screen and access their session without authentication. The issue is described as simila...

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

CVE-2020-27837: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

[SECURITY] Fedora 33 Update: gdm-3.38.2.1-1.fc33

GDM, the GNOME Display Manager, handles authentication-related backend functionality for logging in a user and unlocking the user's session after it's been locked. GDM also provides functionality for initiating user-switc hing, so more than one user can be logged in at the same time. It handles...

Fedora 33 : 1:gdm (2020-1650d8012f)

gdm 3.38.2.1 release : - Address autologin unlock bug issue CVE-2020-27837 - Translation updates Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora: Security Advisory for gdm (FEDORA-2020-1650d8012f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:2264-1 Security update for gdm

This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150. This update was imported from the SUSE:SLE-15:Update update project...

PT-2020-16807

Name of the Vulnerable Software and Affected Versions GDM versions prior to 3.38.2.1 Description A flaw in GDM allows bypassing the lock screen for a user with autologin enabled, accessing their session without authentication due to a race condition in session shutdown handling. Recommendations F...

SUSE SLED15 / SLES15 Security Update : gdm (SUSE-SU-2020:3799-1)

This update for gdm fixes the following issues : CVE-2020-16125: Fixed a privilege escalation bsc1178150. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much a...

EulerOS 2.0 SP5 : gdm (EulerOS-SA-2020-2546)

According to the versions of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local...

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2020-2511)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2020-2546)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for gdm (important)

openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2020:2264-1 Rating: important References: 1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for gdm fixes t...

SUSE-SU-2020:3799-1 Security update for gdm

This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150...

EulerOS 2.0 SP8 : gdm (EulerOS-SA-2020-2511)

According to the version of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner on...

SUSE SLES12 Security Update : gdm (SUSE-SU-2020:3614-1)

This update for gdm fixes the following issues : CVE-2020-16125: Fixed a privilege escalation bsc1178150. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much a...

SUSE SLED15 / SLES15 Security Update : gdm (SUSE-SU-2020:3333-1)

This update for gdm fixes the following issues : Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2020:3614-1 Security update for gdm

This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150...

CVE-2020-16125

A vulnerability was found in GDM. If gdm can't contact the AccountService service via DBus in a timely manner it would default to assume there are no existing users and would allow the attacker to create a new user with high privileges...