Ubuntu 24.04 LTS : GNOME Remote Desktop vulnerability (USN-6785-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6785-1 advisory. Matthias Gerstner discovered that GNOME Remote Desktop incorrectly performed certain user validation checks. A local attacker could possibly use this issue to...

CVE-2024-5148

A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and...

UBUNTU-CVE-2024-5148

A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and...

Updated gdk-pixbuf2.0 packages fix security vulnerability

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

CVE-2024-5148

A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related to transitioning a client connection from the login screen to the user session. As a result, the system RDP TLS certificate and...

PT-2024-5049 · Gnome +2 · Gnome-Remote-Desktop +2

Name of the Vulnerable Software and Affected Versions: gnome-remote-desktop affected versions not specified Description: A flaw was found in the gnome-remote-desktop package, where the gnome-remote-desktop system daemon performs inadequate validation of session agents using D-Bus methods related ...

GNOME Remote desktop 安全漏洞

GNOME Remote desktop is a remote desktop software from GNOME open source. A security vulnerability exists in GNOME Remote desktop that stems from insufficient authentication of the session agent, resulting in the system RDP TLS certificates and keys being potentially exposed to unauthorized users...

CentOS 9 : glib2-2.68.4-15.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the glib2-2.68.4-15.el9 build changelog. - An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus- based client subscribes to signals from a...

Spoofing Attack

GNOME GLib is vulnerable to spoofing Attack. The vulnerability is due to inadequate validation of the source of D-Bus signals in GDBus-based clients, allowing spoofed signals from other users on a shared system to be accepted as legitimate...

Fedora 39 : mingw-glib2 (2024-be032e564d)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-be032e564d advisory. Update glib2 to fix CVE-2024-34397. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

CVE-2024-34459

An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c...

[SECURITY] Fedora 39 Update: gnome-shell-45.6-2.fc39

GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. GNOME Shell takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts to provide a visually attractive and easy...

[SECURITY] Fedora 39 Update: glib2-2.78.6-1.fc39

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...

Debian dla-3814 : libglib2.0-0 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3814 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3814-1 [email protected] https://www.debian.org/lts/security/...

Fedora 39 : glib2 / gnome-shell (2024-fd2569c4e9)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-fd2569c4e9 advisory. Resolve CVE-2024-34397 GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing, and also update gnome-shell to ensure this fix doe...

[SECURITY] Fedora 40 Update: gnome-shell-46.1-2.fc40

GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. GNOME Shell takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts to provide a visually attractive and easy...

Fedora 40 : glib2 / gnome-shell (2024-635a54eb7e)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-635a54eb7e advisory. Resolve CVE-2024-34397 GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing, and also update gnome-shell to ensure this fix doe...

RHEL 7 : evolution-data-server (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-...

RHEL 6 : gnome-keyring (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password...

RHEL 7 : gnome (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnome: heap memory corruption on gdk-pixbuf CVE-2022-48622 Note that Nessus has not tested for this issue but has...