A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mozjs52-develUpgrade clutter-develUpgrade gnome-menus-develUpgrade mozjs60-develUpgrade accountsservice-develUpgrade mozjs52Upgrade gnome-tweaksUpgrade clutterUpgrade gjs-develUpgrade baobabUpgrade clutter-docUpgrade vala-develUpgrade valaUpgrade mozjs60Upgrade gnome-menus | May 4, 2022 | Feb 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 6, 2019 |
| Centos_linux | — | Upgrade gvfs-afp-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gvfs-smbUpgrade gtk3-devel-debuginfoUpgrade gnome-control-centerUpgrade evince-debuginfoUpgrade mozjs60-debugsourceUpgrade nautilus-debugsourceUpgrade gnome-menus-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-sessionUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-session-xsessionUpgrade gvfs-clientUpgrade gvfs-afpUpgrade gtk3-immodule-ximUpgrade gnome-terminal-debuginfoUpgrade gjs-debugsourceUpgrade libxslt-debuginfoUpgrade mutter-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gnome-software-debugsourceUpgrade LibRaw-debuginfoUpgrade gtk3-debugsourceUpgrade vinagre-debugsourceUpgrade gjsUpgrade gvfs-debuginfoUpgrade clutterUpgrade evince-nautilusUpgrade gnome-terminal-nautilus-debuginfoUpgrade mutterUpgrade libxslt-develUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gvfs-goaUpgrade gjs-debuginfoUpgrade accountsservice-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-control-center-filesystemUpgrade mozjs52-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gdm-debuginfoUpgrade gtk3Upgrade clutter-debugsourceUpgrade nautilus-extensionsUpgrade accountsservice-libsUpgrade mutter-tests-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-session-debugsourceUpgrade mozjs60Upgrade baobabUpgrade clutter-tests-debuginfoUpgrade gnome-menus-debuginfoUpgrade accountsserviceUpgrade gnome-software-editor-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade LibRaw-debugsourceUpgrade gvfs-afcUpgrade evince-nautilus-debuginfoUpgrade clutter-debuginfoUpgrade libvncserver-debugsourceUpgrade gtk3-tests-debuginfoUpgrade LibRawUpgrade gsettings-desktop-schemasUpgrade gvfs-afc-debuginfoUpgrade gnome-software-debuginfoUpgrade gvfs-mtpUpgrade evince-libsUpgrade vinagreUpgrade gjs-tests-debuginfoUpgrade vinagre-debuginfoUpgrade gnome-terminalUpgrade libxslt-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade libvncserverUpgrade gvfs-fuseUpgrade gnome-terminal-debugsourceUpgrade gnome-softwareUpgrade gvfs-mtp-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-control-center-debugsourceUpgrade evince-debugsourceUpgrade nautilusUpgrade mutter-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-tweaksUpgrade gnome-online-accounts-develUpgrade baobab-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade libxsltUpgrade gvfsUpgrade gnome-control-center-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-debugsourceUpgrade gvfs-develUpgrade gvfs-gphoto2Upgrade mozjs52-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gnome-boxes-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-boxesUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-remote-desktopUpgrade mozjs60-debuginfoUpgrade mozjs52Upgrade libvncserver-debuginfoUpgrade gnome-shellUpgrade gvfs-archiveUpgrade gtk3-develUpgrade gdm-debugsourceUpgrade baobab-debuginfoUpgrade appstream-dataUpgrade accountsservice-libs-debuginfoUpgrade evince-libs-debuginfoUpgrade gnome-shell-debugsourceUpgrade evinceUpgrade evince-browser-pluginUpgrade gdmUpgrade gnome-software-editorUpgrade accountsservice-debugsourceUpgrade gnome-online-accountsUpgrade gtk3-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-menusUpgrade gnome-terminal-nautilus | Apr 29, 2020 | Feb 6, 2019 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Feb 22, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdm | Apr 30, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdm | Dec 16, 2020 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade libvncserverUpgrade gnome-sessionUpgrade nautilus-extensionsUpgrade evince-browser-pluginUpgrade clutter-develUpgrade gjsUpgrade accountsservice-libsUpgrade gnome-menus-develUpgrade gtk-update-icon-cacheUpgrade vinagreUpgrade mozjs52-develUpgrade gnome-session-wayland-sessionUpgrade nautilusUpgrade evince-nautilusUpgrade gnome-boxesUpgrade gnome-control-centerUpgrade gnome-terminal-nautilusUpgrade libvncserver-develUpgrade gnome-software-editorUpgrade gtk3-develUpgrade LibRaw-develUpgrade gnome-remote-desktopUpgrade gnome-online-accountsUpgrade valaUpgrade gnome-settings-daemonUpgrade mozjs60Upgrade appstream-dataUpgrade libxslt-develUpgrade evince-libsUpgrade gdmUpgrade evinceUpgrade accountsservice-develUpgrade LibRawUpgrade gnome-session-xsessionUpgrade mutter-develUpgrade vala-develUpgrade clutterUpgrade mozjs52Upgrade gtk3-immodule-ximUpgrade clutter-docUpgrade gnome-menusUpgrade gnome-control-center-filesystemUpgrade gnome-shellUpgrade gnome-online-accounts-develUpgrade gjs-develUpgrade gtk3Upgrade gsettings-desktop-schemasUpgrade accountsserviceUpgrade gnome-terminalUpgrade nautilus-develUpgrade mutterUpgrade libxsltUpgrade gnome-tweaksUpgrade gsettings-desktop-schemas-develUpgrade mozjs60-develUpgrade gnome-software | Jul 22, 2024 | Feb 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 6, 2019 |
| Redhat_linux | — | Upgrade gnome-softwareUpgrade libxsltUpgrade mutter-develUpgrade gnome-shell-debuginfoUpgrade mutter-debugsourceUpgrade gnome-terminal-debuginfoUpgrade mozjs60-develUpgrade evinceUpgrade gnome-settings-daemonUpgrade gtk3-immodule-xim-debuginfoUpgrade mozjs60Upgrade vinagre-debugsourceUpgrade gvfsUpgrade baobab-debugsourceUpgrade baobab-debuginfoUpgrade gtk3-debuginfoUpgrade evince-libs-debuginfoUpgrade gnome-shellUpgrade accountsservice-libsUpgrade accountsservice-develUpgrade gvfs-fuse-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gtk3-debugsourceUpgrade nautilus-debuginfoUpgrade gnome-session-xsessionUpgrade gvfs-archiveUpgrade gtk-update-icon-cache-debuginfoUpgrade vala-debugsourceUpgrade vinagre-debuginfoUpgrade libvncserver-debuginfoUpgrade gnome-menus-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-mtpUpgrade gnome-control-center-filesystemUpgrade gvfs-afp-debuginfoUpgrade clutter-tests-debuginfoUpgrade gnome-control-center-debugsourceUpgrade nautilus-debugsourceUpgrade vinagreUpgrade gvfs-afpUpgrade gnome-control-center-debuginfoUpgrade clutter-debuginfoUpgrade nautilusUpgrade libxslt-debuginfoUpgrade LibRaw-debugsourceUpgrade mutter-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade baobabUpgrade gvfs-fuseUpgrade vala-debuginfoUpgrade gdm-debugsourceUpgrade vala-develUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-session-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-terminalUpgrade mozjs60-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-afc-debuginfoUpgrade mozjs52-debuginfoUpgrade gvfs-gphoto2Upgrade gtk3Upgrade gvfs-archive-debuginfoUpgrade gtk-update-icon-cacheUpgrade gvfs-mtp-debuginfoUpgrade clutter-docUpgrade gvfs-clientUpgrade gtk3-immodule-ximUpgrade gnome-online-accounts-develUpgrade evince-nautilus-debuginfoUpgrade gnome-menusUpgrade LibRaw-develUpgrade gdmUpgrade evince-browser-pluginUpgrade gvfs-goaUpgrade gvfs-debugsourceUpgrade nautilus-develUpgrade libxslt-debugsourceUpgrade libvncserver-debugsourceUpgrade mutterUpgrade gnome-online-accounts-debuginfoUpgrade evince-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade clutter-develUpgrade gsettings-desktop-schemasUpgrade gjsUpgrade evince-libsUpgrade gnome-tweaksUpgrade gnome-session-debugsourceUpgrade gtk3-develUpgrade clutterUpgrade gvfs-smb-debuginfoUpgrade gjs-develUpgrade evince-debugsourceUpgrade mozjs52-develUpgrade gvfs-afcUpgrade gnome-settings-daemon-debuginfoUpgrade accountsservice-debugsourceUpgrade gvfs-goa-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-online-accountsUpgrade mutter-tests-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-boxesUpgrade gtk3-devel-debuginfoUpgrade gnome-control-centerUpgrade nautilus-extensions-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-menus-develUpgrade gdm-debuginfoUpgrade gvfs-smbUpgrade libxslt-develUpgrade mozjs60-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade libvncserver-develUpgrade gnome-terminal-debugsourceUpgrade gnome-boxes-debugsourceUpgrade appstream-dataUpgrade gjs-debugsourceNo solution existsUpgrade gvfs-debuginfoUpgrade LibRawUpgrade LibRaw-samples-debuginfoUpgrade valadoc-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gnome-software-debuginfoUpgrade libvncserverUpgrade gnome-software-editorUpgrade gnome-sessionUpgrade gnome-software-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gvfs-client-debuginfoUpgrade nautilus-extensionsUpgrade gnome-menus-debuginfoUpgrade mozjs52-debugsourceUpgrade accountsservice-debuginfoUpgrade gtk3-tests-debuginfoUpgrade accountsserviceUpgrade valaUpgrade clutter-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-remote-desktopUpgrade gnome-terminal-nautilus-debuginfoUpgrade gvfs-develUpgrade evince-nautilusUpgrade gjs-debuginfoUpgrade mozjs52 | Apr 29, 2020 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade mozjs60-debugsourceUpgrade baobabUpgrade mozjs52-debugsourceUpgrade clutter-docUpgrade clutterUpgrade gnome-menusUpgrade mozjs52-devel-debuginfoUpgrade mozjs60Upgrade mozjs60-debuginfoUpgrade mozjs52Upgrade baobab-debuginfoUpgrade baobab-debugsourceUpgrade gnome-menus-debugsourceUpgrade gnome-menus-debuginfoUpgrade mozjs52-develUpgrade clutter-debugsourceUpgrade clutter-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-menus-develUpgrade mozjs60-develUpgrade clutter-devel | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade gdm-branding-upstreamUpgrade gdmflexiserverUpgrade gdm-develUpgrade libgdm1Upgrade gdm-systemdUpgrade gdmUpgrade gdm-langUpgrade typelib-1_0-Gdm-1_0 | Mar 9, 2019 | Feb 6, 2019 |
| Ubuntu | — | Upgrade gdm3 | Feb 28, 2019 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub