A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-tweaksUpgrade clutter-develUpgrade clutterUpgrade gjs-develUpgrade accountsservice-develUpgrade gnome-menus-develUpgrade mozjs52Upgrade mozjs60-develUpgrade mozjs52-develUpgrade mozjs60Upgrade baobabUpgrade clutter-docUpgrade valaUpgrade gnome-menusUpgrade vala-devel | May 4, 2022 | Feb 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 6, 2019 |
| Centos_linux | — | Upgrade libvncserver-debugsourceUpgrade clutter-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gvfs-afcUpgrade gvfs-gphoto2-debuginfoUpgrade gdm-debuginfoUpgrade gvfs-client-debuginfoUpgrade gvfs-smbUpgrade mozjs52-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-terminal-debuginfoUpgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade gtk-update-icon-cacheUpgrade gnome-menus-debuginfoUpgrade gvfs-goaUpgrade accountsservice-libsUpgrade mozjs60-debugsourceUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-session-xsessionUpgrade gvfs-clientUpgrade LibRaw-debugsourceUpgrade gnome-control-center-filesystemUpgrade evince-nautilus-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-menus-debugsourceUpgrade gnome-sessionUpgrade gvfs-afp-debuginfoUpgrade gvfs-afpUpgrade evince-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gtk3-devel-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade mutterUpgrade gnome-software-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade LibRaw-debuginfoUpgrade libxslt-debuginfoUpgrade gtk3-immodule-ximUpgrade evince-nautilusUpgrade gtk3-debugsourceUpgrade gjsUpgrade gvfs-fuse-debuginfoUpgrade libxslt-develUpgrade vinagre-debugsourceUpgrade mutter-tests-debuginfoUpgrade gvfs-debuginfoUpgrade clutter-debugsourceUpgrade gjs-debuginfoUpgrade gnome-settings-daemonUpgrade accountsservice-debuginfoUpgrade baobabUpgrade gnome-settings-daemon-debugsourceUpgrade mozjs60Upgrade gtk3Upgrade gnome-session-debugsourceUpgrade nautilus-extensionsUpgrade clutter-tests-debuginfoUpgrade gjs-debugsourceUpgrade clutterUpgrade nautilus-debugsourceUpgrade mutter-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-control-centerUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfsUpgrade baobab-debuginfoUpgrade gnome-software-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-control-center-debugsourceUpgrade nautilusUpgrade gsettings-desktop-schemasUpgrade gnome-control-center-debuginfoUpgrade gnome-terminal-nautilusUpgrade gjs-tests-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gvfs-mtpUpgrade gvfs-debugsourceUpgrade nautilus-debuginfoUpgrade gnome-terminalUpgrade gtk-update-icon-cache-debuginfoUpgrade mutter-debugsourceUpgrade gnome-boxes-debuginfoUpgrade gvfs-gphoto2Upgrade gnome-boxesUpgrade gnome-shell-debugsourceUpgrade baobab-debugsourceUpgrade LibRawUpgrade gvfs-develUpgrade gnome-online-accounts-develUpgrade gnome-settings-daemon-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade libxslt-debugsourceUpgrade gvfs-fuseUpgrade gnome-terminal-debugsourceUpgrade gnome-softwareUpgrade gnome-tweaksUpgrade gdmUpgrade gnome-menusUpgrade vinagreUpgrade libvncserverUpgrade gnome-remote-desktopUpgrade vinagre-debuginfoUpgrade gnome-boxes-debugsourceUpgrade mozjs52-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gnome-software-editorUpgrade evince-libsUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accountsUpgrade libxsltUpgrade gnome-online-accounts-debuginfoUpgrade evince-browser-pluginUpgrade evinceUpgrade libvncserver-debuginfoUpgrade evince-debugsourceUpgrade mozjs52Upgrade gvfs-smb-debuginfoUpgrade mozjs60-debuginfoUpgrade gvfs-archiveUpgrade gdm-debugsourceUpgrade evince-libs-debuginfoUpgrade accountsservice-debugsourceUpgrade appstream-dataUpgrade gnome-shellUpgrade gtk3-develUpgrade gtk3-debuginfo | Apr 29, 2020 | Feb 6, 2019 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Feb 22, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdm | Apr 30, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdm | Dec 16, 2020 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade nautilusUpgrade gnome-terminal-nautilusUpgrade gnome-session-wayland-sessionUpgrade mozjs52-develUpgrade gnome-boxesUpgrade libxslt-develUpgrade libvncserver-develUpgrade evince-libsUpgrade clutter-develUpgrade valaUpgrade gnome-settings-daemonUpgrade vinagreUpgrade gnome-online-accountsUpgrade accountsservice-libsUpgrade nautilus-extensionsUpgrade mozjs60Upgrade gjsUpgrade gnome-menus-develUpgrade gtk3-develUpgrade LibRaw-develUpgrade evince-browser-pluginUpgrade libvncserverUpgrade evince-nautilusUpgrade gnome-remote-desktopUpgrade gnome-software-editorUpgrade gnome-control-centerUpgrade appstream-dataUpgrade gtk-update-icon-cacheUpgrade gnome-sessionUpgrade evinceUpgrade gtk3-immodule-ximUpgrade mozjs60-develUpgrade gdmUpgrade clutterUpgrade mozjs52Upgrade clutter-docUpgrade gnome-control-center-filesystemUpgrade gnome-menusUpgrade accountsservice-develUpgrade LibRawUpgrade libxsltUpgrade nautilus-develUpgrade mutter-develUpgrade mutterUpgrade vala-develUpgrade gnome-softwareUpgrade gnome-session-xsessionUpgrade gnome-tweaksUpgrade gsettings-desktop-schemas-develUpgrade gjs-develUpgrade gnome-shellUpgrade gsettings-desktop-schemasUpgrade accountsserviceUpgrade gnome-online-accounts-develUpgrade gtk3Upgrade gnome-terminal | Jul 22, 2024 | Feb 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 6, 2019 |
| Redhat_linux | — | Upgrade gnome-shellUpgrade vala-develUpgrade gtk3-immodules-debuginfoUpgrade gvfs-archive-debuginfoUpgrade accountsservice-libsUpgrade nautilus-debugsourceUpgrade vala-debugsourceUpgrade mozjs52-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-menus-debugsourceUpgrade gdm-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade evince-nautilus-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade libvncserver-debuginfoUpgrade mutter-debuginfoUpgrade baobabUpgrade gvfs-mtpUpgrade evince-libs-debuginfoUpgrade gnome-settings-daemonUpgrade gvfs-fuse-debuginfoUpgrade vinagreUpgrade baobab-debugsourceUpgrade gvfs-archiveUpgrade gnome-session-xsessionUpgrade accountsservice-develUpgrade vinagre-debugsourceUpgrade gvfsUpgrade mozjs60Upgrade gtk3-immodule-xim-debuginfoUpgrade mozjs60-develUpgrade gvfs-afp-debuginfoUpgrade libxsltUpgrade mozjs60-debugsourceUpgrade mutter-debugsourceUpgrade mutter-develUpgrade gvfs-afpUpgrade gtk3-immodule-ximUpgrade vala-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gnome-softwareUpgrade nautilusUpgrade gnome-terminal-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gvfs-clientUpgrade gtk3-debuginfoUpgrade vinagre-debuginfoUpgrade evinceUpgrade gdmUpgrade gvfs-mtp-debuginfoUpgrade gnome-control-center-filesystemUpgrade baobab-debuginfoUpgrade gnome-session-debuginfoUpgrade LibRaw-develUpgrade clutter-debuginfoUpgrade gnome-menusUpgrade clutter-docUpgrade gtk3-debugsourceUpgrade gvfs-gphoto2Upgrade gnome-remote-desktop-debugsourceUpgrade LibRaw-debugsourceUpgrade clutter-tests-debuginfoUpgrade libxslt-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gtk3Upgrade gvfs-fuseUpgrade gnome-terminalUpgrade nautilus-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-develUpgrade accountsservice-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gnome-menus-develUpgrade gtk3-develUpgrade LibRawUpgrade valadoc-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gvfs-smb-debuginfoUpgrade evince-libsUpgrade gnome-online-accounts-debuginfoUpgrade clutterUpgrade valaUpgrade mozjs52-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gsettings-desktop-schemasUpgrade gjs-develUpgrade gjsUpgrade evince-debugsourceUpgrade gnome-session-wayland-sessionUpgrade mozjs52-develUpgrade mozjs60-debuginfoUpgrade accountsserviceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-debugsourceUpgrade libvncserverUpgrade gjs-debuginfoUpgrade clutter-develUpgrade gnome-session-debugsourceUpgrade gvfs-debugsourceUpgrade accountsservice-debugsourceUpgrade nautilus-develUpgrade libvncserver-develUpgrade mutter-tests-debuginfoUpgrade evince-browser-pluginUpgrade gnome-remote-desktopUpgrade gnome-control-centerUpgrade libxslt-debugsourceUpgrade gjs-debugsourceUpgrade gvfs-goa-debuginfoUpgrade appstream-dataUpgrade mozjs52Upgrade evince-nautilusUpgrade gnome-online-accountsUpgrade nautilus-extensions-debuginfoUpgrade gjs-tests-debuginfoUpgrade gvfs-develUpgrade gnome-terminal-nautilus-debuginfoUpgrade gvfs-smbUpgrade LibRaw-debuginfoUpgrade gdm-debuginfoUpgrade gnome-boxesUpgrade gnome-terminal-nautilusUpgrade gnome-software-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-boxes-debuginfoUpgrade mutterUpgrade gvfs-afcUpgrade mozjs52-devel-debuginfoUpgrade gvfs-client-debuginfoUpgrade libvncserver-debugsourceNo solution existsUpgrade nautilus-extensionsUpgrade gnome-software-editorUpgrade gnome-sessionUpgrade libxslt-develUpgrade clutter-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-debuginfoUpgrade evince-debuginfoUpgrade gnome-tweaksUpgrade gnome-menus-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gvfs-goa | Apr 29, 2020 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade mozjs60Upgrade clutterUpgrade mozjs52-debugsourceUpgrade gnome-menusUpgrade baobab-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade mozjs52Upgrade baobabUpgrade mozjs60-debuginfoUpgrade mozjs60-debugsourceUpgrade clutter-docUpgrade baobab-debuginfoUpgrade mozjs52-develUpgrade mozjs60-develUpgrade gnome-menus-debuginfoUpgrade clutter-debugsourceUpgrade clutter-debuginfoUpgrade gnome-menus-develUpgrade mozjs52-debuginfoUpgrade gnome-menus-debugsourceUpgrade clutter-devel | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade libgdm1Upgrade gdm-branding-upstreamUpgrade gdmflexiserverUpgrade gdm-develUpgrade typelib-1_0-Gdm-1_0Upgrade gdmUpgrade gdm-langUpgrade gdm-systemd | Mar 9, 2019 | Feb 6, 2019 |
| Ubuntu | — | Upgrade gdm3 | Feb 28, 2019 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub