Lucene search
+L

484 matches found

OpenVAS
OpenVAS
added 2021/02/05 12:00 a.m.31 views

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2021-1192)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.7AI score0.01109EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/02/04 12:00 a.m.48 views

EulerOS 2.0 SP5 : gdm (EulerOS-SA-2021-1192)

According to the version of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner on...

7.2CVSS7.2AI score0.01109EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:00 a.m.45 views

CentOS 8 : GNOME (CESA-2020:1766)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1766 advisory. - LibRaw: stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp CVE-2018-20337 - gvfs: mishandling of file ownership in...

8.8CVSS7AI score0.0207EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
added 2021/01/25 12:00 a.m.32 views

openSUSE Security Update : gdm (openSUSE-2020-2264)

This update for gdm fixes the following issues : - CVE-2020-16125: Fixed a privilege escalation bsc1178150. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

7.2CVSS7.1AI score0.01109EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/04 2:42 p.m.17 views

MGASA-2021-0003 Updated gdm packages fix a security vulnerability

Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user...

7.2CVSS6.8AI score0.01109EPSS
SaveExploits1References4
Mageia
Mageia
added 2021/01/04 2:42 p.m.66 views

Updated gdm packages fix a security vulnerability

Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user...

7.2CVSS3.3AI score0.01109EPSS
SaveExploits1References3
NVD
NVD
added 2020/12/28 7:15 p.m.17 views

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

6.4CVSS5AI score0.00225EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/28 7:15 p.m.35 views

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

6.4CVSS6.4AI score
SaveExploits0References1
Prion
Prion
added 2020/12/28 7:15 p.m.24 views

Race condition

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

4.4CVSS6.1AI score0.00385EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2020/12/28 7:15 p.m.363 views

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

6.4CVSS6.5AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
added 2020/12/28 6:34 p.m.114 views

CVE-2020-27837

CVE-2020-27837 affects GNOME Display Manager (GDM) versions before 3.38.2.1. The vulnerability is a race condition in how session shutdown is handled, allowing a user with autologin enabled to bypass the lock screen and access their session without authentication. The issue is described as simila...

6.4CVSS6AI score0.00225EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/28 6:34 p.m.45 views

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

6.1AI score0.00225EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2020/12/28 6:34 p.m.60 views

CVE-2020-27837

A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...

6.4CVSS5.3AI score0.00225EPSS
SaveExploits0
Fedora
Fedora
added 2020/12/22 1:30 a.m.63 views

[SECURITY] Fedora 33 Update: gdm-3.38.2.1-1.fc33

GDM, the GNOME Display Manager, handles authentication-related backend functionality for logging in a user and unlocking the user's session after it's been locked. GDM also provides functionality for initiating user-switc hing, so more than one user can be logged in at the same time. It handles...

6.4CVSS1.7AI score0.00225EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/12/22 12:00 a.m.27 views

Fedora 33 : 1:gdm (2020-1650d8012f)

gdm 3.38.2.1 release : - Address autologin unlock bug issue CVE-2020-27837 - Translation updates Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

6.4CVSS6.4AI score0.00225EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/12/22 12:00 a.m.21 views

Fedora: Security Advisory for gdm (FEDORA-2020-1650d8012f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.4CVSS7.1AI score0.00225EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/15 11:44 a.m.12 views

OPENSUSE-SU-2020:2264-1 Security update for gdm

This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation bsc1178150. This update was imported from the SUSE:SLE-15:Update update project...

7.2CVSS7.1AI score0.01109EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2020/12/15 12:00 a.m.39 views

SUSE SLED15 / SLES15 Security Update : gdm (SUSE-SU-2020:3799-1)

This update for gdm fixes the following issues : CVE-2020-16125: Fixed a privilege escalation bsc1178150. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much a...

7.2CVSS7.1AI score0.01109EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2020/12/15 12:00 a.m.17 views

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2020-2546)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.00532EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/12/15 12:00 a.m.24 views

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2020-2511)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.7AI score0.01109EPSS
SaveExploits1References2
Rows per page
Query Builder