GDM vulnerability

2020-11-03T00:00:00
ID USN-4614-1
Type ubuntu
Reporter Ubuntu
Modified 2020-11-03T00:00:00

Description

Kevin Backhouse discovered that GDM incorrectly launched the initial setup
tool when the accountsservice daemon was not reachable. A local attacker
able to cause accountsservice to crash or stop responding could trick GDM
into launching the initial setup tool and create a privileged user.