22 matches found
RHEL 5 : gdm (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gdm: inability to timely contact accountservice via dbus leads gnome-initial-setup to creation of account with admi...
Mageia: Security Advisory (MGASA-2021-0003)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:3333-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2020:3614-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2021-1192)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : gdm (openSUSE-2020-2264)
This update for gdm fixes the following issues : - CVE-2020-16125: Fixed a privilege escalation bsc1178150. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
Updated gdm packages fix a security vulnerability
Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user...
OPENSUSE-SU-2020:2264-1 Security update for gdm
This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150. This update was imported from the SUSE:SLE-15:Update update project...
SUSE SLED15 / SLES15 Security Update : gdm (SUSE-SU-2020:3799-1)
This update for gdm fixes the following issues : CVE-2020-16125: Fixed a privilege escalation bsc1178150. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much a...
Security update for gdm (important)
openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2020:2264-1 Rating: important References: 1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for gdm fixes t...
Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2020-2511)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2020:3799-1 Security update for gdm
This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150...
EulerOS 2.0 SP8 : gdm (EulerOS-SA-2020-2511)
According to the version of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner on...
SUSE SLED15 / SLES15 Security Update : gdm (SUSE-SU-2020:3333-1)
This update for gdm fixes the following issues : Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...
SUSE SLES12 Security Update : gdm (SUSE-SU-2020:3614-1)
This update for gdm fixes the following issues : CVE-2020-16125: Fixed a privilege escalation bsc1178150. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much a...
SUSE-SU-2020:3614-1 Security update for gdm
This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150...
openSUSE Security Update : gdm (openSUSE-2020-1961)
This update for gdm fixes the following issues : - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
SUSE-SU-2020:3333-1 Security update for gdm
This update for gdm fixes the following issues: - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125...
CVE-2020-16125
CVE-2020-16125 affects gdm/gdm3 (GNOME Display Manager). Root cause: when gdm3 cannot reach the accountservice via D-Bus in a timely manner, gnome-initial-setup may be started, which on some distros could be chained with another issue to allow a local user to create a new privileged account. The ...
CVE-2020-16125
gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu and potentially derivatives this could be be chained with an additional issue that could allow a local user to create a new privileged...