539 matches found
Code injection
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code...
CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code...
CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code...
CVE-2018-14424
The CVE-2018-14424 issue affects the GDM daemon (GNOME Display Manager) and is caused by the daemon not properly unexporting display objects from its D-Bus interface when they are destroyed. This creates a local-use-after-free condition that can lead to a denial of service and, in the worst case,...
CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code...
CVE-2018-14424: Use After Free
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code...
Ubuntu 18.04 LTS : GDM vulnerability (USN-3737-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3737-1 advisory. A use-after-free was discovered in GDM. A local user could exploit this to cause a denial of service, or potentially execute arbitrary code as the administrator...
CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code...
USN-3737-1: GDM vulnerability
A use-after-free was discovered in GDM. A local user could exploit this to cause a denial of service, or potentially execute arbitrary code as the administrator...
CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code...
PT-2018-12505
Name of the Vulnerable Software and Affected Versions GDM versions prior to 3.29.1 ALT Linux affected versions not specified Description The issue arises from the daemon in GDM not properly unexporting display objects from its D-Bus interface when they are destroyed. This allows a local attacker ...
CVE-2017-12164
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...
Design/Logic Flaw
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...
DEBIAN-CVE-2017-12164
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...
CVE-2017-12164
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...
CVE-2017-12164
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...
CVE-2017-12164
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...
CVE-2017-12164
The CVE-2017-12164 entry concerns GDM (GNOME Display Manager) with a flaw in version 3.24.1 where the greeter fails to set ran_once during autologin. If autologin is enabled, an attacker could unlock the screen by selecting “login as another user.” Public documents identify this as a session auto...
CVE-2017-12164
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...
CVE-2017-12164
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen...