CVE-2020-16125

CVE-2020-16125 affects gdm/gdm3 (GNOME Display Manager). Root cause: when gdm3 cannot reach the accountservice via D-Bus in a timely manner, gnome-initial-setup may be started, which on some distros could be chained with another issue to allow a local user to create a new privileged account. The ...

CVE-2019-3825

CVE-2019-3825 affects gdm (GNOME Display Manager) prior to 3.31.4. When timed login is enabled, an attacker can bypass the lock screen by selecting the timed-login user and waiting for the timer to expire, gaining access to the logged-in user’s session. This is a local/physical-access scenario wi...

CVE-2020-27837

CVE-2020-27837 affects GNOME Display Manager (GDM) versions before 3.38.2.1. The vulnerability is a race condition in how session shutdown is handled, allowing a user with autologin enabled to bypass the lock screen and access their session without authentication. The issue is described as simila...

CVE-2018-14424

The CVE-2018-14424 issue affects the GDM daemon (GNOME Display Manager) and is caused by the daemon not properly unexporting display objects from its D-Bus interface when they are destroyed. This creates a local-use-after-free condition that can lead to a denial of service and, in the worst case,...

CVE-2017-12164

The CVE-2017-12164 entry concerns GDM (GNOME Display Manager) with a flaw in version 3.24.1 where the greeter fails to set ran_once during autologin. If autologin is enabled, an attacker could unlock the screen by selecting “login as another user.” Public documents identify this as a session auto...

CVE-2013-4169

The CVE-2013-4169 issue affects GNOME Display Manager (gdm) up to version 2.21.0, with a local attacker able to exploit a symlink on /tmp/.X11-unix to change permissions of arbitrary directories. Root cause: improper handling of symlinks in the /tmp/.X11-unix path leads to a privilege escalation....

CVE-2015-7496

CVE-2015-7496 affects the GNOME Display Manager (gdm) prior to 3.18.2. The root cause is a faulty input handling where a signal/escape-key sequence can be exploited, enabling a physically proximate attacker to bypass the lock screen by holding the Escape key. Reported across multiple advisories (...

CVE-2016-1000002

CVE-2016-1000002 concerns gdm3 3.14.2 and possibly later, with an information leak before screen lock. The connected documents consistently identify this as a information disclosure vulnerability affecting the GDM display manager, leading to partial confidentiality impact. The exact affected vers...

CVE-2010-2387

CVE-2010-2387 affects GNOME Display Manager (gdm) 2.20.x up to, but not including, 2.20.11. When GDM debug is enabled, ve-misc.c logs user passwords contained in invalid UTF-8 sequences to syslog, potentially allowing local users to read sensitive credentials from logs and gain privileges. The is...

CVE-2013-7273

CVE-2013-7273 affects GNOME Display Manager (gdm) 3.4.1 and earlier. When the setting disable-user-list is true, local users can cause a denial of service by pressing the cancel button after entering a username, resulting in an inability to log in. The description documents the vulnerable compone...