Lucene search
UbuntuUSN-6963-1HistoryAug 15, 2024 - 12:00 a.m.
GNOME Shell vulnerability
2024-08-1500:00:00
ubuntu.com
44
gnome shell
ubuntu 20.04
ubuntu 22.04
ubuntu 24.04
vulnerability
portal helper
captive network
remote attack
javascript
resource consumption
AI Score
7.2
Confidence
Low
Releases
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- gnome-shell - graphical shell for the GNOME desktop
Details
It was discovered that GNOME Shell incorrectly opened the portal helper
automatically when detecting a captive network portal. A remote attacker
could possibly use this issue to load arbitrary web pages containing
JavaScript, leading to resource consumption or other attacks.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | gnome-shell | < 46.0-0ubuntu6~24.04.3 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gnome-shell-common | < 46.0-0ubuntu6~24.04.3 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gnome-shell-dbgsym | < 46.0-0ubuntu6~24.04.3 | UNKNOWN |
| Ubuntu | 24.04 | noarch | gnome-shell-extension-prefs | < 46.0-0ubuntu6~24.04.3 | UNKNOWN |
| Ubuntu | 22.04 | noarch | gnome-shell | < 42.9-0ubuntu2.2 | UNKNOWN |
| Ubuntu | 22.04 | noarch | gnome-shell-common | < 42.9-0ubuntu2.2 | UNKNOWN |
| Ubuntu | 22.04 | noarch | gnome-shell-dbgsym | < 42.9-0ubuntu2.2 | UNKNOWN |
| Ubuntu | 22.04 | noarch | gnome-shell-extension-prefs | < 42.9-0ubuntu2.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | gnome-shell | < 3.36.9-0ubuntu0.20.04.4 | UNKNOWN |
| Ubuntu | 20.04 | noarch | gnome-shell-common | < 3.36.9-0ubuntu0.20.04.4 | UNKNOWN |
References
Related
nessus
nessus
RHEL 8 : gnome-shell (RHSA-2024:5298)
2024-08-14 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : GNOME Shell vulnerability (USN-6963-1)
2024-08-15 00:00:00
SUSE SLED12 / SLES12 Security Update : gnome-shell (SUSE-SU-2024:2589-1)
2024-07-23 00:00:00
nvd
nvd
CVE-2024-36472
2024-05-28 16:15:17
CVE-2023-50977
2024-05-27 14:15:09
debiancve
debiancve
CVE-2024-36472
2024-05-28 16:15:17
oraclelinux
oraclelinux
gnome-shell security update
2024-08-13 00:00:00
almalinux
almalinux
Moderate: gnome-shell security update
2024-08-13 00:00:00
osv
osv
CVE-2024-36472
2024-05-28 16:15:17
Moderate: gnome-shell security update
2024-08-13 00:00:00
Security update for gnome-shell
2024-07-22 12:06:07
vulnrichment
vulnrichment
CVE-2024-36472
1976-01-01 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2589-1)
2024-07-23 00:00:00
Ubuntu: Security Advisory (USN-6963-1)
2024-08-16 00:00:00
Mageia: Security Advisory (MGASA-2024-0314)
2024-09-27 00:00:00
redhat
redhat
(RHSA-2024:5298) Moderate: gnome-shell security update
2024-08-13 14:51:59
cvelist
cvelist
CVE-2024-36472
1976-01-01 00:00:00
mageia
mageia
Updated gnome-shell packages fix security vulnerability
2024-09-27 04:30:52
redhatcve
redhatcve
CVE-2024-36472
2024-05-29 08:50:22
ubuntucve
ubuntucve
CVE-2024-36472
2024-05-28 00:00:00
cve
cve
CVE-2024-36472
2024-05-28 16:15:17
CVE-2023-50977
2024-05-27 14:15:09