A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade valaUpgrade gnome-menusUpgrade mozjs60Upgrade baobabUpgrade vala-develUpgrade clutter-docUpgrade mozjs60-develUpgrade gjs-develUpgrade clutter-develUpgrade mozjs52Upgrade accountsservice-develUpgrade gnome-menus-develUpgrade clutterUpgrade mozjs52-develUpgrade gnome-tweaks | May 4, 2022 | Feb 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 6, 2019 |
| Centos_linux | — | Upgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade nautilus-extensionsUpgrade gtk-update-icon-cacheUpgrade gtk3Upgrade gjs-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-software-debugsourceUpgrade gtk3-immodule-ximUpgrade libxslt-debuginfoUpgrade gvfs-goa-debuginfoUpgrade mutterUpgrade LibRaw-debuginfoUpgrade accountsservice-libsUpgrade gvfs-debuginfoUpgrade gjs-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade vinagre-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade libxslt-develUpgrade LibRaw-debugsourceUpgrade gnome-terminal-debuginfoUpgrade mutter-tests-debuginfoUpgrade gjsUpgrade gvfs-clientUpgrade mozjs60-debugsourceUpgrade gvfs-afpUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-sessionUpgrade evince-debuginfoUpgrade gnome-settings-daemonUpgrade evince-nautilusUpgrade gnome-session-xsessionUpgrade gvfs-afp-debuginfoUpgrade clutter-tests-debuginfoUpgrade gnome-menus-debugsourceUpgrade clutter-debugsourceUpgrade gdm-debuginfoUpgrade gvfs-smbUpgrade evince-nautilus-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-control-centerUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-devel-debuginfoUpgrade baobabUpgrade gnome-remote-desktop-debugsourceUpgrade gtk3-debugsourceUpgrade gnome-software-editor-debuginfoUpgrade mozjs60Upgrade gnome-menus-debuginfoUpgrade clutter-debuginfoUpgrade mutter-debuginfoUpgrade gnome-session-wayland-sessionUpgrade libvncserver-debugsourceUpgrade gtk3-tests-debuginfoUpgrade clutterUpgrade gnome-control-center-filesystemUpgrade gvfs-goaUpgrade gvfs-afcUpgrade gvfs-client-debuginfoUpgrade mozjs52-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gsettings-desktop-schemasUpgrade gtk3-immodule-xim-debuginfoUpgrade libxsltUpgrade gtk3-debuginfoUpgrade gnome-session-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade evince-browser-pluginUpgrade evinceUpgrade gvfs-afc-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-archive-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-terminalUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-shell-debugsourceUpgrade LibRawUpgrade mutter-debugsourceUpgrade baobab-debugsourceUpgrade gnome-online-accounts-develUpgrade gtk3-immodules-debuginfoUpgrade gnome-tweaksUpgrade baobab-debuginfoUpgrade evince-libs-debuginfoUpgrade gvfs-archiveUpgrade gvfs-smb-debuginfoUpgrade vinagre-debuginfoUpgrade mozjs52Upgrade LibRaw-samples-debuginfoUpgrade libxslt-debugsourceUpgrade libvncserverUpgrade gvfs-fuseUpgrade gnome-terminal-debugsourceUpgrade gnome-softwareUpgrade accountsservice-libs-debuginfoUpgrade gvfs-debugsourceUpgrade appstream-dataUpgrade gnome-shellUpgrade gtk3-develUpgrade mozjs60-debuginfoUpgrade gdm-debugsourceUpgrade libvncserver-debuginfoUpgrade gnome-terminal-nautilusUpgrade gvfs-mtpUpgrade gjs-tests-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade evince-debugsourceUpgrade nautilusUpgrade gnome-control-center-debugsourceUpgrade vinagreUpgrade gdmUpgrade gnome-software-editorUpgrade gnome-software-debuginfoUpgrade evince-libsUpgrade gnome-menusUpgrade accountsservice-debugsourceUpgrade mozjs52-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gvfs-gphoto2Upgrade gvfs-develUpgrade gnome-remote-desktopUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-online-accountsUpgrade gnome-boxesUpgrade gnome-boxes-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gvfs | Apr 29, 2020 | Feb 6, 2019 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Feb 22, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdm | Apr 30, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdm | Dec 16, 2020 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade gnome-menusUpgrade libxsltUpgrade gnome-softwareUpgrade gsettings-desktop-schemasUpgrade gnome-tweaksUpgrade evinceUpgrade LibRawUpgrade accountsservice-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-online-accounts-develUpgrade gnome-shellUpgrade gtk3Upgrade mutterUpgrade gnome-control-center-filesystemUpgrade gjs-develUpgrade vala-develUpgrade mutter-develUpgrade gnome-session-xsessionUpgrade nautilus-develUpgrade gtk3-immodule-ximUpgrade accountsserviceUpgrade mozjs60-develUpgrade clutter-docUpgrade mozjs52Upgrade clutterUpgrade gdmUpgrade gnome-terminalUpgrade libvncserver-develUpgrade libxslt-develUpgrade gnome-settings-daemonUpgrade gnome-online-accountsUpgrade evince-libsUpgrade gnome-terminal-nautilusUpgrade vinagreUpgrade gtk-update-icon-cacheUpgrade gnome-menus-develUpgrade gjsUpgrade accountsservice-libsUpgrade gnome-software-editorUpgrade gnome-sessionUpgrade gnome-control-centerUpgrade libvncserverUpgrade LibRaw-develUpgrade gtk3-develUpgrade mozjs60Upgrade appstream-dataUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade nautilus-extensionsUpgrade nautilusUpgrade gnome-session-wayland-sessionUpgrade gnome-boxesUpgrade gnome-remote-desktopUpgrade valaUpgrade mozjs52-develUpgrade clutter-devel | Jul 22, 2024 | Feb 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 6, 2019 |
| Redhat_linux | — | Upgrade nautilus-extensionsUpgrade gnome-software-editorUpgrade nautilus-develUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-software-debugsourceUpgrade libvncserverUpgrade LibRaw-samples-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-menus-debuginfoUpgrade gjs-debuginfoUpgrade valadoc-debuginfoUpgrade gnome-online-accountsUpgrade mutterUpgrade gvfs-goaUpgrade gnome-terminal-nautilus-debuginfoUpgrade evince-debuginfoUpgrade libxslt-develUpgrade gvfs-smb-debuginfoUpgrade gnome-session-debugsourceUpgrade evince-libsUpgrade gtk3-develUpgrade gjs-develUpgrade gvfs-afcUpgrade gnome-sessionUpgrade clutterUpgrade gvfs-smbUpgrade gnome-settings-daemon-debugsourceUpgrade mozjs60-debuginfoUpgrade gdm-debuginfoUpgrade LibRaw-debuginfoUpgrade gjs-debugsourceUpgrade gvfs-debugsourceUpgrade clutter-debugsourceUpgrade mozjs52Upgrade gnome-control-centerUpgrade libxslt-debugsourceUpgrade gvfs-debuginfoUpgrade mozjs52-develUpgrade mutter-tests-debuginfoUpgrade libvncserver-debugsourceUpgrade libvncserver-develUpgrade gnome-boxes-debugsourceNo solution existsUpgrade gnome-terminal-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gtk3-devel-debuginfoUpgrade accountsservice-debuginfoUpgrade valaUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-shell-debugsourceUpgrade accountsserviceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-boxesUpgrade gnome-software-editor-debuginfoUpgrade gvfs-goa-debuginfoUpgrade LibRawUpgrade appstream-dataUpgrade clutter-develUpgrade gnome-remote-desktopUpgrade gnome-remote-desktop-debuginfoUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade evince-debugsourceUpgrade gvfs-develUpgrade accountsservice-debugsourceUpgrade gsettings-desktop-schemasUpgrade gjsUpgrade gnome-menus-develUpgrade gnome-software-debuginfoUpgrade gnome-tweaksUpgrade gjs-tests-debuginfoUpgrade gnome-terminal-nautilusUpgrade nautilus-extensions-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade vinagreUpgrade gnome-terminal-debuginfoUpgrade clutter-debuginfoUpgrade gnome-control-center-filesystemUpgrade baobab-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade baobab-debuginfoUpgrade accountsservice-libsUpgrade nautilusUpgrade accountsservice-develUpgrade clutter-docUpgrade clutter-tests-debuginfoUpgrade gvfs-fuseUpgrade gtk3Upgrade gvfs-clientUpgrade mutter-develUpgrade gvfs-archiveUpgrade gvfs-afp-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-control-center-debuginfoUpgrade mozjs60-develUpgrade gnome-shell-debuginfoUpgrade gvfs-afpUpgrade libxsltUpgrade gtk3-immodule-xim-debuginfoUpgrade LibRaw-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-softwareUpgrade gvfs-gphoto2Upgrade gnome-settings-daemonUpgrade gdm-debugsourceUpgrade vala-develUpgrade vala-debuginfoUpgrade mozjs52-debuginfoUpgrade gvfs-afc-debuginfoUpgrade mozjs60-debugsourceUpgrade LibRaw-develUpgrade gnome-terminalUpgrade nautilus-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-menusUpgrade gtk3-debugsourceUpgrade gnome-session-xsessionUpgrade mutter-debugsourceUpgrade gvfs-mtpUpgrade vala-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade baobabUpgrade gtk3-immodule-ximUpgrade vinagre-debuginfoUpgrade gdmUpgrade gnome-online-accounts-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gnome-menus-debugsourceUpgrade gtk-update-icon-cache-debuginfoUpgrade vinagre-debugsourceUpgrade mutter-debuginfoUpgrade evinceUpgrade gvfsUpgrade gvfs-archive-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade nautilus-debugsourceUpgrade libxslt-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-session-debuginfoUpgrade evince-libs-debuginfoUpgrade gnome-shellUpgrade libvncserver-debuginfoUpgrade mozjs60Upgrade evince-nautilus-debuginfo | Apr 29, 2020 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade gnome-menus-develUpgrade gnome-menus-debuginfoUpgrade mozjs60-develUpgrade clutter-debugsourceUpgrade clutter-develUpgrade gnome-menus-debugsourceUpgrade mozjs52-develUpgrade mozjs52-debuginfoUpgrade clutter-debuginfoUpgrade clutterUpgrade baobab-debugsourceUpgrade gnome-menusUpgrade baobab-debuginfoUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade mozjs52Upgrade mozjs60-debugsourceUpgrade mozjs60-debuginfoUpgrade baobabUpgrade mozjs60Upgrade clutter-doc | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade gdm-branding-upstreamUpgrade gdm-develUpgrade libgdm1Upgrade gdmflexiserverUpgrade gdm-systemdUpgrade gdm-langUpgrade typelib-1_0-Gdm-1_0Upgrade gdm | Mar 9, 2019 | Feb 6, 2019 |
| Ubuntu | — | Upgrade gdm3 | Feb 28, 2019 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub