A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mozjs52Upgrade clutter-develUpgrade clutterUpgrade gnome-menus-develUpgrade mozjs52-develUpgrade gjs-develUpgrade mozjs60-develUpgrade accountsservice-develUpgrade gnome-tweaksUpgrade baobabUpgrade clutter-docUpgrade mozjs60Upgrade valaUpgrade gnome-menusUpgrade vala-devel | May 4, 2022 | Feb 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 6, 2019 |
| Centos_linux | — | Upgrade gnome-remote-desktop-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-shell-debugsourceUpgrade gvfs-archive-debuginfoUpgrade LibRawUpgrade accountsservice-libs-debuginfoUpgrade gnome-terminalUpgrade gvfs-smb-debuginfoUpgrade gnome-tweaksUpgrade gtk3-develUpgrade gvfs-archiveUpgrade libvncserver-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gdm-debugsourceUpgrade gnome-shellUpgrade mozjs60-debuginfoUpgrade baobab-debugsourceUpgrade mutter-debugsourceUpgrade baobab-debuginfoUpgrade mozjs52Upgrade gvfs-mtp-debuginfoUpgrade appstream-dataUpgrade gtk3-immodules-debuginfoUpgrade gnome-menusUpgrade gtk-update-icon-cache-debuginfoUpgrade vinagreUpgrade gvfs-gphoto2Upgrade gnome-software-editorUpgrade gtk3-debuginfoUpgrade libxsltUpgrade gvfs-develUpgrade gnome-boxesUpgrade gnome-remote-desktopUpgrade gnome-boxes-debugsourceUpgrade mozjs52-debuginfoUpgrade gdmUpgrade evince-libsUpgrade gnome-boxes-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-online-accountsUpgrade accountsservice-debugsourceUpgrade gsettings-desktop-schemasUpgrade gvfs-fuseUpgrade vinagre-debuginfoUpgrade nautilus-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-terminal-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-softwareUpgrade libvncserverUpgrade evince-debugsourceUpgrade libxslt-debugsourceUpgrade gnome-software-debuginfoUpgrade gvfsUpgrade gnome-terminal-nautilusUpgrade gnome-online-accounts-debuginfoUpgrade gvfs-debugsourceUpgrade evinceUpgrade gjs-tests-debuginfoUpgrade gvfs-afc-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-mtpUpgrade evince-browser-pluginUpgrade nautilusUpgrade evince-libs-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-session-debuginfoUpgrade accountsserviceUpgrade gnome-session-wayland-sessionUpgrade gvfs-fuse-debuginfoUpgrade gnome-session-xsessionUpgrade libxslt-develUpgrade gtk-update-icon-cacheUpgrade gvfs-smbUpgrade nautilus-debugsourceUpgrade mozjs52-debugsourceUpgrade gnome-control-centerUpgrade mozjs52-devel-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-sessionUpgrade vinagre-debugsourceUpgrade accountsservice-debuginfoUpgrade gvfs-client-debuginfoUpgrade evince-nautilusUpgrade gtk3-debugsourceUpgrade gjsUpgrade evince-debuginfoUpgrade mozjs60-debugsourceUpgrade gvfs-clientUpgrade LibRaw-debugsourceUpgrade gvfs-afp-debuginfoUpgrade gvfs-afpUpgrade gnome-menus-debugsourceUpgrade gnome-remote-desktop-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gtk3-immodule-ximUpgrade mutter-tests-debuginfoUpgrade libxslt-debuginfoUpgrade mutterUpgrade gnome-software-debugsourceUpgrade gnome-terminal-debuginfoUpgrade LibRaw-debuginfoUpgrade gjs-debugsourceUpgrade gjs-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-session-debugsourceUpgrade baobabUpgrade mozjs60Upgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-menus-debuginfoUpgrade clutter-tests-debuginfoUpgrade gnome-settings-daemonUpgrade nautilus-extensionsUpgrade gdm-debuginfoUpgrade clutter-debugsourceUpgrade clutterUpgrade mutter-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gvfs-goaUpgrade gnome-control-center-filesystemUpgrade accountsservice-libsUpgrade gvfs-afcUpgrade gtk3-tests-debuginfoUpgrade libvncserver-debugsourceUpgrade clutter-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gtk3Upgrade gtk3-devel-debuginfoUpgrade gvfs-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gsettings-desktop-schemas-devel | Apr 29, 2020 | Feb 6, 2019 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Feb 22, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdm | Apr 30, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdm | Dec 16, 2020 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade LibRaw-develUpgrade gtk3-develUpgrade libvncserverUpgrade gnome-control-centerUpgrade appstream-dataUpgrade gnome-software-editorUpgrade nautilus-extensionsUpgrade mozjs60Upgrade evince-browser-pluginUpgrade evince-nautilusUpgrade gnome-settings-daemonUpgrade gnome-sessionUpgrade libxslt-develUpgrade gnome-session-wayland-sessionUpgrade nautilusUpgrade gnome-boxesUpgrade gjsUpgrade gnome-menus-develUpgrade gtk-update-icon-cacheUpgrade gnome-remote-desktopUpgrade gnome-terminal-nautilusUpgrade clutter-develUpgrade libvncserver-develUpgrade mozjs52-develUpgrade accountsservice-libsUpgrade vinagreUpgrade gnome-online-accountsUpgrade valaUpgrade evince-libsUpgrade gsettings-desktop-schemas-develUpgrade mozjs52Upgrade clutter-docUpgrade clutterUpgrade gnome-session-xsessionUpgrade gnome-menusUpgrade accountsservice-develUpgrade LibRawUpgrade evinceUpgrade gnome-online-accounts-develUpgrade gnome-control-center-filesystemUpgrade gjs-develUpgrade gsettings-desktop-schemasUpgrade gnome-shellUpgrade gtk3Upgrade gnome-tweaksUpgrade vala-develUpgrade accountsserviceUpgrade gnome-terminalUpgrade gtk3-immodule-ximUpgrade nautilus-develUpgrade mozjs60-develUpgrade libxsltUpgrade mutter-develUpgrade mutterUpgrade gnome-softwareUpgrade gdm | Jul 22, 2024 | Feb 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 6, 2019 |
| Redhat_linux | — | Upgrade mutter-develUpgrade clutter-tests-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-session-debuginfoUpgrade baobab-debuginfoUpgrade baobab-debugsourceUpgrade gnome-control-center-filesystemUpgrade LibRaw-develUpgrade gnome-menusUpgrade gtk3-debuginfoUpgrade gnome-terminalUpgrade gvfs-fuse-debuginfoUpgrade gnome-session-xsessionUpgrade gtk-update-icon-cacheUpgrade gvfsUpgrade nautilus-debuginfoUpgrade nautilusUpgrade gsettings-desktop-schemas-develUpgrade accountsservice-libsUpgrade mozjs60Upgrade evince-libs-debuginfoUpgrade libxsltUpgrade gvfs-archiveUpgrade libxslt-debuginfoUpgrade gvfs-fuseUpgrade LibRaw-debugsourceUpgrade gvfs-afpUpgrade gtk3Upgrade mozjs60-develUpgrade gnome-shellUpgrade gtk3-debugsourceUpgrade mozjs60-debugsourceUpgrade vinagre-debugsourceUpgrade mutter-debuginfoUpgrade evinceUpgrade vala-develUpgrade gvfs-afc-debuginfoUpgrade vala-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-softwareUpgrade gvfs-afp-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-settings-daemonUpgrade gvfs-gphoto2Upgrade mutter-debugsourceUpgrade accountsservice-develUpgrade clutter-debuginfoUpgrade clutter-docUpgrade gvfs-mtpUpgrade gdm-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-clientUpgrade gtk-update-icon-cache-debuginfoUpgrade baobabUpgrade evince-nautilus-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade vinagre-debuginfoUpgrade gnome-menus-debugsourceUpgrade gtk3-immodule-ximUpgrade vala-debugsourceUpgrade gdmUpgrade vinagreUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-control-center-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-terminal-debuginfoUpgrade libvncserver-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gvfs-goaUpgrade gnome-session-wayland-sessionUpgrade gnome-control-centerUpgrade mozjs52Upgrade clutter-debugsourceUpgrade mozjs60-debuginfoUpgrade gvfs-debugsourceUpgrade nautilus-develUpgrade gtk3-develUpgrade gnome-boxes-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-tweaksUpgrade mozjs52-devel-debuginfoUpgrade gnome-shell-debugsourceUpgrade gdm-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gvfs-smbUpgrade gvfs-goa-debuginfoUpgrade gnome-remote-desktopUpgrade libvncserver-develUpgrade mutter-tests-debuginfoUpgrade appstream-dataUpgrade evince-nautilusUpgrade gjs-debugsourceUpgrade libxslt-debugsourceUpgrade evince-browser-pluginUpgrade gnome-software-debuginfoUpgrade gvfs-afcUpgrade gvfs-smb-debuginfoUpgrade libxslt-develUpgrade LibRaw-debuginfoUpgrade evince-debuginfoUpgrade gjs-debuginfoUpgrade gvfs-client-debuginfoNo solution existsUpgrade evince-libsUpgrade gnome-settings-daemon-debugsourceUpgrade clutter-develUpgrade gtk3-tests-debuginfoUpgrade libvncserver-debugsourceUpgrade gsettings-desktop-schemasUpgrade evince-debugsourceUpgrade gnome-online-accountsUpgrade gjs-develUpgrade gjsUpgrade gnome-terminal-nautilusUpgrade nautilus-extensionsUpgrade gjs-tests-debuginfoUpgrade gnome-boxesUpgrade gnome-menus-develUpgrade gnome-terminal-nautilus-debuginfoUpgrade gvfs-develUpgrade mozjs52-debugsourceUpgrade gnome-session-debugsourceUpgrade accountsserviceUpgrade accountsservice-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-boxes-debugsourceUpgrade LibRawUpgrade valadoc-debuginfoUpgrade gnome-menus-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade clutterUpgrade gnome-sessionUpgrade libvncserverUpgrade accountsservice-debuginfoUpgrade gvfs-debuginfoUpgrade gnome-software-debugsourceUpgrade mutterUpgrade valaUpgrade mozjs52-develUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-software-editor | Apr 29, 2020 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade baobab-debuginfoUpgrade mozjs52Upgrade baobab-debugsourceUpgrade clutterUpgrade mozjs60Upgrade mozjs60-debugsourceUpgrade mozjs60-debuginfoUpgrade gnome-menusUpgrade baobabUpgrade clutter-docUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gnome-menus-debugsourceUpgrade clutter-debugsourceUpgrade clutter-debuginfoUpgrade mozjs52-develUpgrade clutter-develUpgrade mozjs52-debuginfoUpgrade mozjs60-develUpgrade gnome-menus-develUpgrade gnome-menus-debuginfo | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade gdm-branding-upstreamUpgrade libgdm1Upgrade gdm-develUpgrade gdmflexiserverUpgrade gdmUpgrade gdm-langUpgrade typelib-1_0-Gdm-1_0Upgrade gdm-systemd | Mar 9, 2019 | Feb 6, 2019 |
| Ubuntu | — | Upgrade gdm3 | Feb 28, 2019 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub