A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade clutter-docUpgrade vala-develUpgrade valaUpgrade gnome-menusUpgrade baobabUpgrade mozjs60Upgrade gjs-develUpgrade clutterUpgrade mozjs52-develUpgrade gnome-menus-develUpgrade mozjs60-develUpgrade mozjs52Upgrade gnome-tweaksUpgrade clutter-develUpgrade accountsservice-devel | May 4, 2022 | Feb 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 6, 2019 |
| Centos_linux | — | Upgrade libxslt-debugsourceUpgrade gvfs-mtpUpgrade evince-browser-pluginUpgrade gnome-terminal-nautilusUpgrade gvfs-debugsourceUpgrade libvncserverUpgrade LibRaw-samples-debuginfoUpgrade gnome-softwareUpgrade mozjs52-debuginfoUpgrade gnome-remote-desktopUpgrade gvfs-gphoto2Upgrade gnome-settings-daemon-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gnome-boxes-debugsourceUpgrade vinagre-debuginfoUpgrade gnome-online-accountsUpgrade gtk3-debuginfoUpgrade evinceUpgrade gnome-boxesUpgrade gnome-boxes-debuginfoUpgrade gnome-online-accounts-develUpgrade gtk-update-icon-cache-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-tweaksUpgrade gnome-session-debuginfoUpgrade mutter-debugsourceUpgrade gvfsUpgrade nautilusUpgrade gnome-control-center-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade accountsservice-debugsourceUpgrade evince-libsUpgrade mozjs52Upgrade libxsltUpgrade mozjs60-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-menusUpgrade baobab-debugsourceUpgrade LibRawUpgrade gvfs-develUpgrade gnome-software-editorUpgrade gvfs-fuseUpgrade gtk3-immodule-xim-debuginfoUpgrade evince-debugsourceUpgrade gdmUpgrade libvncserver-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-software-debuginfoUpgrade appstream-dataUpgrade gnome-control-center-debuginfoUpgrade evince-libs-debuginfoUpgrade vinagreUpgrade baobab-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gtk3-develUpgrade nautilus-debuginfoUpgrade gvfs-smb-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gjs-tests-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-archiveUpgrade gdm-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-shellUpgrade gnome-terminalUpgrade gvfs-archive-debuginfoUpgrade mutterUpgrade LibRaw-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gvfs-client-debuginfoUpgrade clutter-debugsourceUpgrade mutter-tests-debuginfoUpgrade libxslt-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-software-debugsourceUpgrade gjs-debugsourceUpgrade gdm-debuginfoUpgrade gvfs-smbUpgrade mozjs52-devel-debuginfoUpgrade nautilus-debugsourceUpgrade mozjs52-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-control-centerUpgrade mozjs60-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade nautilus-extensionsUpgrade gnome-menus-debugsourceUpgrade gnome-sessionUpgrade evince-nautilusUpgrade clutter-debuginfoUpgrade gjsUpgrade gnome-remote-desktop-debugsourceUpgrade libxslt-develUpgrade accountsservice-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gvfs-afcUpgrade libvncserver-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade evince-debuginfoUpgrade gvfs-clientUpgrade gvfs-afpUpgrade gnome-session-xsessionUpgrade evince-nautilus-debuginfoUpgrade gvfs-afp-debuginfoUpgrade vinagre-debugsourceUpgrade LibRaw-debugsourceUpgrade gtk3-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gvfs-debuginfoUpgrade gjs-debuginfoUpgrade clutterUpgrade gvfs-goaUpgrade mutter-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-menus-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-shell-debuginfoUpgrade mozjs60Upgrade baobabUpgrade clutter-tests-debuginfoUpgrade gtk3Upgrade accountsserviceUpgrade gtk-update-icon-cacheUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-debugsourceUpgrade gvfs-goa-debuginfoUpgrade accountsservice-libsUpgrade gnome-control-center-filesystem | Apr 29, 2020 | Feb 6, 2019 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Feb 22, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdm | Apr 30, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdm | Dec 16, 2020 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade valaUpgrade gtk3-develUpgrade gnome-terminal-nautilusUpgrade gnome-control-centerUpgrade libvncserver-develUpgrade nautilus-extensionsUpgrade clutter-develUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade evince-libsUpgrade mozjs52-develUpgrade gnome-online-accountsUpgrade gnome-settings-daemonUpgrade gnome-sessionUpgrade gnome-software-editorUpgrade nautilusUpgrade LibRaw-develUpgrade gnome-remote-desktopUpgrade gnome-boxesUpgrade gnome-session-wayland-sessionUpgrade vinagreUpgrade mozjs60Upgrade accountsservice-libsUpgrade appstream-dataUpgrade gjsUpgrade libxslt-develUpgrade libvncserverUpgrade gnome-menus-develUpgrade gtk-update-icon-cacheUpgrade nautilus-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-tweaksUpgrade gnome-softwareUpgrade gjs-develUpgrade mutterUpgrade mozjs60-develUpgrade libxsltUpgrade gnome-menusUpgrade mozjs52Upgrade gtk3-immodule-ximUpgrade clutterUpgrade vala-develUpgrade gnome-session-xsessionUpgrade evinceUpgrade LibRawUpgrade accountsservice-develUpgrade accountsserviceUpgrade gdmUpgrade gnome-terminalUpgrade clutter-docUpgrade mutter-develUpgrade gtk3Upgrade gnome-online-accounts-develUpgrade gsettings-desktop-schemasUpgrade gnome-shellUpgrade gnome-control-center-filesystem | Jul 22, 2024 | Feb 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 6, 2019 |
| Redhat_linux | — | Upgrade gtk3Upgrade mozjs60-debugsourceUpgrade vala-develUpgrade accountsservice-develUpgrade vala-debuginfoUpgrade gnome-shell-debuginfoUpgrade mozjs60-develUpgrade gvfs-fuse-debuginfoUpgrade gvfs-afc-debuginfoUpgrade LibRaw-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade evince-libs-debuginfoUpgrade gnome-menus-debugsourceUpgrade LibRaw-develUpgrade gtk3-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-shellUpgrade gnome-session-xsessionUpgrade clutter-tests-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-terminalUpgrade gvfs-clientUpgrade nautilus-debuginfoUpgrade libxsltUpgrade gvfs-archiveUpgrade gtk-update-icon-cache-debuginfoUpgrade libxslt-debuginfoUpgrade mutter-debuginfoUpgrade gvfs-fuseUpgrade gnome-settings-daemonUpgrade baobab-debuginfoUpgrade libvncserver-debuginfoUpgrade gvfs-mtpUpgrade vala-debugsourceUpgrade gtk3-debuginfoUpgrade gdm-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gnome-online-accounts-develUpgrade gdmUpgrade vinagre-debuginfoUpgrade mutter-develUpgrade gtk3-immodule-xim-debuginfoUpgrade baobab-debugsourceUpgrade accountsservice-libsUpgrade nautilusUpgrade gvfs-archive-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-softwareUpgrade vinagre-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gvfs-gphoto2Upgrade gnome-session-debuginfoUpgrade evinceUpgrade gnome-terminal-debuginfoUpgrade mutter-debugsourceUpgrade gnome-menusUpgrade clutter-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-control-center-filesystemUpgrade mozjs52-debuginfoUpgrade gvfs-afpUpgrade gnome-online-accounts-debugsourceUpgrade gtk3-immodule-ximUpgrade gtk3-immodules-debuginfoUpgrade clutter-docUpgrade gvfs-mtp-debuginfoUpgrade mozjs60Upgrade vinagreUpgrade gvfs-afp-debuginfoUpgrade gvfsUpgrade baobabUpgrade gnome-software-editor-debuginfoUpgrade mozjs60-debuginfoUpgrade gtk3-develUpgrade clutter-develUpgrade gnome-software-editorUpgrade gnome-software-debugsourceUpgrade gvfs-afcUpgrade gvfs-client-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-menus-debuginfoUpgrade gnome-sessionUpgrade gvfs-develUpgrade mutterUpgrade gvfs-debuginfoUpgrade valadoc-debuginfoUpgrade mozjs52Upgrade libvncserver-develUpgrade gnome-remote-desktopUpgrade libxslt-develUpgrade gnome-control-centerUpgrade gjsUpgrade gnome-remote-desktop-debuginfoUpgrade valaUpgrade evince-browser-pluginUpgrade gvfs-goaUpgrade libxslt-debugsourceUpgrade nautilus-develUpgrade evince-libsUpgrade gnome-settings-daemon-debugsourceUpgrade gjs-debugsourceUpgrade gnome-boxes-debugsourceUpgrade gjs-develUpgrade mutter-tests-debuginfoUpgrade appstream-dataUpgrade libvncserverUpgrade gnome-software-debuginfoUpgrade accountsserviceUpgrade clutter-debugsourceUpgrade gnome-online-accountsUpgrade gnome-boxesUpgrade gvfs-smbUpgrade gjs-tests-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-debugsourceUpgrade gdm-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-menus-develUpgrade gnome-terminal-nautilusUpgrade evince-nautilusUpgrade gnome-session-wayland-sessionUpgrade accountsservice-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-tweaksUpgrade gvfs-debugsourceUpgrade gvfs-goa-debuginfoUpgrade mozjs52-develUpgrade gvfs-smb-debuginfoUpgrade libvncserver-debugsourceUpgrade gtk3-devel-debuginfoUpgrade clutterUpgrade evince-debuginfoNo solution existsUpgrade LibRawUpgrade LibRaw-samples-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gjs-debuginfoUpgrade gnome-boxes-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gsettings-desktop-schemasUpgrade evince-debugsourceUpgrade gtk3-tests-debuginfoUpgrade accountsservice-debugsourceUpgrade mozjs52-debugsourceUpgrade nautilus-extensionsUpgrade gnome-terminal-debugsourceUpgrade mozjs52-devel-debuginfo | Apr 29, 2020 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade baobab-debugsourceUpgrade mozjs52Upgrade mozjs52-devel-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-menusUpgrade baobab-debuginfoUpgrade mozjs60Upgrade mozjs60-debuginfoUpgrade mozjs52-debugsourceUpgrade clutterUpgrade baobabUpgrade clutter-docUpgrade gnome-menus-debuginfoUpgrade clutter-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-menus-develUpgrade clutter-debugsourceUpgrade mozjs60-develUpgrade clutter-develUpgrade mozjs52-develUpgrade gnome-menus-debugsource | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade gdm-langUpgrade gdmUpgrade gdm-systemdUpgrade typelib-1_0-Gdm-1_0Upgrade gdmflexiserverUpgrade libgdm1Upgrade gdm-develUpgrade gdm-branding-upstream | Mar 9, 2019 | Feb 6, 2019 |
| Ubuntu | — | Upgrade gdm3 | Feb 28, 2019 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub