PT-2018-5374 · Gnome+1 · Gdm+1

Cedric Buissart + 1 · Publicado 2017-05-11 · Atualizado 2024-06-15 · CVE-2017-12164

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions gdm version 3.24.1

Description A flaw was discovered in gdm where the gdm greeter was no longer setting the ran once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.

Recommendations For gdm version 3.24.1, update to a version where the gdm greeter correctly sets the ran once boolean during autologin to prevent attackers from unlocking screens by selecting 'login as another user'.

Correção

Improper Initialization

Enumeração de Fraquezas

CWE-592

CWE-665

Identificadores relacionados

ALT-PU-2017-1588

ALT-PU-2017-2192

CVE-2017-12164

MGASA-2018-0056

OPENSUSE-SU-2024:10780-1

Produtos afetados

Alt Linux

Gdm

Referências · 20

• https://osv.dev/vulnerability/DEBIAN-CVE-2017-12164 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-14424 · Nota
• https://gitlab.gnome.org/GNOME/gdm/commit/ff98b28 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2018-0056.html · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2024:10780-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-3825 · Nota
• https://osv.dev/vulnerability/MGASA-2018-0056 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12164 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/CUDXKEMLQPVFJP52PBLEOLKUMYUY25UJ · Aviso do Fabricante
• https://t.me/cvenotify/7830 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2017-12164 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=21717 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2017-12164 · Nota
• https://errata.altlinux.org/ALT-PU-2017-2192 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12164 · Nota de Segurança