In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-dash-to-panelUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-places-menuUpgrade gnome-shellUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-drive-menu | Aug 22, 2024 | May 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade gnome-shellUpgrade gnome-shell-debuginfo | Dec 20, 2024 | May 28, 2024 |
| Debian | — | Upgrade gnome-shell | May 15, 2025 | May 28, 2024 |
| Oracle_linux | — | Upgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shellUpgrade gnome-shell-extension-dash-to-panelUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-drive-menu | Oct 16, 2024 | May 28, 2024 |
| Redhat_linux | — | Upgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-updates-dialogNo solution existsUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-apps-menuUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-dash-to-panelUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shellUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-screenshot-window-sizer | Sep 13, 2024 | May 28, 2024 |
| Rocky_linux | — | Upgrade gnome-shellUpgrade gnome-shell-debugsourceUpgrade gnome-shell-debuginfo | May 8, 2025 | May 28, 2024 |
| Suse | — | Upgrade gnome-shellUpgrade gnome-shell-browser-pluginUpgrade gnome-extensionsUpgrade gnome-shell-develUpgrade gnome-shell-calendarUpgrade gnome-shell-lang | Jul 23, 2024 | May 28, 2024 |
| Ubuntu | — | Upgrade gnome-shell | Aug 19, 2024 | May 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub