GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gdm-develUpgrade gdm-debuginfoUpgrade gdmUpgrade gnome-session-debuginfoUpgrade gnome-sessionUpgrade gnome-session-xsessionUpgrade gnome-session-custom-session | Aug 28, 2019 | Nov 24, 2015 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Nov 24, 2015 |
| Freebsd | — | Upgrade gdm | Dec 10, 2025 | Nov 18, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gdmUpgrade gdm-libs | Nov 30, 2017 | Nov 24, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Nov 30, 2017 | Nov 24, 2015 |
| Oracle_linux | — | Upgrade gdm-develUpgrade gnome-session-xsessionUpgrade gnome-session-custom-sessionUpgrade gnome-sessionUpgrade gdm | Aug 8, 2017 | Nov 12, 2015 |
| Redhat_linux | — | Upgrade gnome-session-custom-sessionUpgrade gnome-session-xsessionUpgrade gnome-session-debuginfoUpgrade gdmUpgrade gdm-develUpgrade gnome-sessionUpgrade gdm-debuginfo | Aug 5, 2017 | Nov 24, 2015 |
| Suse | — | Upgrade gdmUpgrade gdmflexiserverUpgrade gdm-systemdUpgrade gdm-develUpgrade gdm-langUpgrade typelib-1_0-Gdm-1_0Upgrade libgdm1 | May 20, 2018 | Nov 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub