PT-2024-14037 · Gnome · Gnome Captive Portal+3

Published 2024-05-27 · Updated 2024-05-28 · CVE-2023-50977

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions GNOME Shell versions through 45.2

Description The issue allows for unauthenticated remote code execution by intercepting two DNS requests, specifically the GNOME Network Manager and GNOME Shell Portal Helper connectivity checks, and responding with attacker-specific IP addresses. This causes the GNOME Captive Portal to launch via a WebKitGTK browser, which can run JavaScript code inside a sandbox. Note that the vendor considers this behavior intended, as the JavaScript code runs inside a sandbox.

Recommendations For GNOME Shell versions through 45.2, consider restricting the use of the WebKitGTK browser or disabling the GNOME Captive Portal feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-50977

Affected Products

Gnome Captive Portal

Networkmanager-Gnome

Gnome Shell

Webkitgtk

References · 3

• https://osv.dev/vulnerability/CVE-2023-50977 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50977 · Security Note
• https://t.me/cvenotify/81084 · Telegram Post