gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gnome-shell | Jul 30, 2024 | Nov 6, 2010 |
| Suse | — | Upgrade gnome-shell-browser-pluginUpgrade gnome-extensionsUpgrade gnome-shellUpgrade gnome-shell-develUpgrade gnome-shell-calendarUpgrade gnome-shell-lang | Aug 9, 2024 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub