Unscored severity · published Apr 29, 2014
CVE-2013-7221
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Gnome-shell · Gnome
through 3.9.92; 3.0.0; 3.0.0.1; 3.0.0.2; 3.0.1; 3.0.2; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7221
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7221
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/12/27/4
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/12/27/8
bugzilla.gnome.org
https://bugzilla.gnome.org/show_bug.cgi?id=708313
git.gnome.org
https://git.gnome.org/browse/gnome-shell/commit/js/ui/main.js?id=efdf1ff755943fba1f8a9aaeff77daa3ed338088
More from Gnome-shell
8.1
CVE-2017-8288
gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen
6.1
CVE-2021-20315
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are…
5.5
CVE-2023-43090
A vulnerability was found in GNOME Shell
5.5
CVE-2021-3982
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue
4.3
CVE-2020-17489
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4