GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade gdmUpgrade gdm-systemdUpgrade gdmflexiserverUpgrade gdm-langUpgrade libgdm1Upgrade typelib-1_0-Gdm-1_0Upgrade gdm-branding-upstreamUpgrade gdm-schemaUpgrade gdm-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade gdm | Nov 8, 2024 | Jun 14, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub