PT-2007-1103 · Gnome+1 · Gnome Display Manager+1
Publicado
2007-08-07
·
Atualizado
2018-10-16
·
CVE-2007-3381
CVSS v2.0
1.5
Baixa
| Vetor | AV:L/AC:M/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
GNOME Display Manager (GDM) versions prior to 2.14.13
GNOME Display Manager (GDM) versions 2.16.x prior to 2.16.7
GNOME Display Manager (GDM) versions 2.18.x prior to 2.18.4
GNOME Display Manager (GDM) versions 2.19.x prior to 2.19.5
Description:
The issue allows local users to cause a denial of service, resulting in a persistent daemon crash. This can be achieved by sending a crafted command to the daemon's socket. The problem is related to the handling of NULL return values from the
g strsplit function in files such as gdm.c, gdmconfig.c, and gdmflexiserver.c. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.Recommendations:
For versions prior to 2.14.13, update to version 2.14.13 or later.
For versions 2.16.x prior to 2.16.7, update to version 2.16.7 or later.
For versions 2.18.x prior to 2.18.4, update to version 2.18.4 or later.
For versions 2.19.x prior to 2.19.5, update to version 2.19.5 or later.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gnome Display Manager
Red Hat