GD
Product
Gnome Display Manager
10
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 1
Watch
Add Gnome Display Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14424 | 7.8 | Aug 14 | The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a… Affected: through 3.29.1 |
| CVE-2020-16125 | 6.8 | Nov 10 | gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially… Affected: before 3.36.2; 3.38.0 before 3.38.2 |
| CVE-2020-27837 | 6.4 | Dec 28 | A flaw was found in GDM in versions prior to 3.38.2.1 Affected: before 3.38.2.1 |
| CVE-2019-3825 | 6.4 | Feb 6 | A vulnerability was discovered in gdm before 3.31.4 Affected: before 3.31.4 |
| CVE-2017-12164 | 6.4 | Jul 26 | A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin Affected: 3.24.1 |
| CVE-2016-1000002 | 2.4 | Nov 5 | gdm3 3.14.2 and possibly later has an information leak before screen lock Affected: 3.14.2 |
| CVE-2015-7496 | – | Nov 24 | GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key Affected: through 3.18.0 |
| CVE-2013-7273 | – | Apr 29 | GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel… Affected: through 3.4.1; 3.0.0; 3.0.2; 3.0.3; 3.0.4; 3.1.2; +10 more |
| CVE-2013-4169 | – | Sep 10 | GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/ Affected: through 2.21; 0.7; 1.0; 2.0; 2.2; 2.13; +34 more |
| CVE-2010-2387 | – | Dec 21 | vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded… Affected: 2.20.0; 2.20.1; 2.20.2; 2.20.3; 2.20.4; 2.20.5; +5 more |
Showing 10