GDM vulnerability

ID USN-4614-1
Type ubuntu
Reporter Ubuntu
Modified 2020-11-03T00:00:00


Kevin Backhouse discovered that GDM incorrectly launched the initial setup
tool when the accountsservice daemon was not reachable. A local attacker
able to cause accountsservice to crash or stop responding could trick GDM
into launching the initial setup tool and create a privileged user.