A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade clutter-docUpgrade vala-develUpgrade baobabUpgrade mozjs60Upgrade valaUpgrade gnome-menusUpgrade gnome-menus-develUpgrade gjs-develUpgrade mozjs60-develUpgrade clutterUpgrade clutter-develUpgrade mozjs52-develUpgrade gnome-tweaksUpgrade mozjs52Upgrade accountsservice-devel | May 4, 2022 | Feb 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 6, 2019 |
| Centos_linux | — | Upgrade nautilus-extensions-debuginfoUpgrade nautilusUpgrade mozjs52Upgrade gvfs-archiveUpgrade accountsservice-libs-debuginfoUpgrade LibRawUpgrade LibRaw-samples-debuginfoUpgrade gnome-boxesUpgrade gvfs-mtp-debuginfoUpgrade vinagre-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-session-debuginfoUpgrade gvfs-debugsourceUpgrade libvncserverUpgrade gnome-remote-desktop-debuginfoUpgrade appstream-dataUpgrade baobab-debuginfoUpgrade evince-libs-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-terminal-nautilusUpgrade nautilus-debuginfoUpgrade gvfs-fuseUpgrade gdm-debugsourceUpgrade baobab-debugsourceUpgrade gnome-terminalUpgrade gvfs-develUpgrade gnome-boxes-debuginfoUpgrade evince-browser-pluginUpgrade gnome-remote-desktopUpgrade gnome-boxes-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-shell-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade evinceUpgrade gnome-softwareUpgrade libxslt-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade mutter-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gnome-control-center-debugsourceUpgrade evince-debugsourceUpgrade gvfs-afc-debuginfoUpgrade gnome-menusUpgrade gdmUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-mtpUpgrade libxsltUpgrade gnome-software-debuginfoUpgrade gtk3-develUpgrade accountsservice-debugsourceUpgrade gnome-software-editorUpgrade evince-libsUpgrade gnome-terminal-debugsourceUpgrade gnome-tweaksUpgrade gvfsUpgrade gnome-control-center-debuginfoUpgrade mozjs60-debuginfoUpgrade vinagreUpgrade gnome-shellUpgrade gvfs-smb-debuginfoUpgrade libvncserver-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-online-accountsUpgrade gnome-settings-daemon-debuginfoUpgrade gsettings-desktop-schemasUpgrade gtk-update-icon-cache-debuginfoUpgrade gvfs-gphoto2Upgrade gjs-debugsourceUpgrade mutterUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-settings-daemonUpgrade LibRaw-debuginfoUpgrade mutter-tests-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-software-debugsourceUpgrade gnome-terminal-debuginfoUpgrade libxslt-debuginfoUpgrade gvfs-clientUpgrade gvfs-afcUpgrade gdm-debuginfoUpgrade clutter-debuginfoUpgrade baobabUpgrade gnome-menus-debuginfoUpgrade mozjs60Upgrade gnome-session-debugsourceUpgrade clutter-tests-debuginfoUpgrade gvfs-afp-debuginfoUpgrade libvncserver-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gnome-sessionUpgrade gtk3-devel-debuginfoUpgrade gnome-session-wayland-sessionUpgrade mozjs52-debugsourceUpgrade clutter-debugsourceUpgrade mozjs60-debugsourceUpgrade gnome-remote-desktop-debugsourceUpgrade evince-debuginfoUpgrade nautilus-debugsourceUpgrade gtk3-debugsourceUpgrade evince-nautilusUpgrade libxslt-develUpgrade gnome-online-accounts-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gvfs-afpUpgrade mozjs52-devel-debuginfoUpgrade gvfs-smbUpgrade LibRaw-debugsourceUpgrade nautilus-extensionsUpgrade gsettings-desktop-schemas-develUpgrade accountsserviceUpgrade accountsservice-libsUpgrade gvfs-goa-debuginfoUpgrade mutter-debuginfoUpgrade clutterUpgrade gvfs-goaUpgrade gvfs-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-terminal-nautilus-debuginfoUpgrade gtk3Upgrade gtk-update-icon-cacheUpgrade gjs-debuginfoUpgrade gnome-session-xsessionUpgrade accountsservice-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-client-debuginfoUpgrade gjsUpgrade gnome-menus-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gnome-control-centerUpgrade vinagre-debugsource | Apr 29, 2020 | Feb 6, 2019 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Feb 22, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdm | Apr 30, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdm | Dec 16, 2020 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade libxslt-develUpgrade gnome-settings-daemonUpgrade gnome-online-accountsUpgrade gnome-terminal-nautilusUpgrade libvncserver-develUpgrade clutter-develUpgrade appstream-dataUpgrade mozjs60Upgrade evince-libsUpgrade libvncserverUpgrade gnome-control-centerUpgrade mozjs52-develUpgrade valaUpgrade gnome-remote-desktopUpgrade gnome-session-wayland-sessionUpgrade gnome-boxesUpgrade nautilus-extensionsUpgrade evince-nautilusUpgrade gtk3-develUpgrade evince-browser-pluginUpgrade gnome-menus-develUpgrade gnome-sessionUpgrade nautilusUpgrade gnome-software-editorUpgrade gjsUpgrade LibRaw-develUpgrade gtk-update-icon-cacheUpgrade vinagreUpgrade accountsservice-libsUpgrade accountsservice-develUpgrade nautilus-develUpgrade gnome-terminalUpgrade mutter-develUpgrade mutterUpgrade mozjs60-develUpgrade libxsltUpgrade accountsserviceUpgrade gnome-softwareUpgrade gnome-session-xsessionUpgrade gnome-menusUpgrade mozjs52Upgrade clutter-docUpgrade gdmUpgrade gtk3-immodule-ximUpgrade clutterUpgrade gsettings-desktop-schemas-develUpgrade gnome-tweaksUpgrade vala-develUpgrade gsettings-desktop-schemasUpgrade LibRawUpgrade gnome-shellUpgrade gnome-online-accounts-develUpgrade gnome-control-center-filesystemUpgrade gjs-develUpgrade gtk3Upgrade evince | Jul 22, 2024 | Feb 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 6, 2019 |
| Redhat_linux | — | Upgrade gvfs-fuse-debuginfoUpgrade gnome-control-center-filesystemUpgrade gtk3-debuginfoUpgrade vinagre-debugsourceUpgrade mozjs60Upgrade gnome-control-center-debugsourceUpgrade mutter-debugsourceUpgrade gnome-terminal-debuginfoUpgrade gvfs-gphoto2Upgrade nautilusUpgrade gnome-shellUpgrade gnome-settings-daemonUpgrade gnome-session-debuginfoUpgrade evinceUpgrade accountsservice-libsUpgrade nautilus-debugsourceUpgrade clutter-tests-debuginfoUpgrade gvfsUpgrade baobab-debugsourceUpgrade gtk3Upgrade gnome-terminalUpgrade vala-develUpgrade gvfs-fuseUpgrade nautilus-debuginfoUpgrade baobab-debuginfoUpgrade gnome-menusUpgrade clutter-docUpgrade mozjs52-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade libxslt-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-softwareUpgrade mutter-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-shell-debuginfoUpgrade evince-libs-debuginfoUpgrade mutter-develUpgrade gvfs-archive-debuginfoUpgrade vala-debuginfoUpgrade LibRaw-develUpgrade gnome-session-xsessionUpgrade clutter-debuginfoUpgrade mozjs60-debugsourceUpgrade gtk-update-icon-cacheUpgrade evince-nautilus-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-mtpUpgrade libvncserver-debuginfoUpgrade gvfs-afc-debuginfoUpgrade vinagreUpgrade gdm-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gtk3-immodule-ximUpgrade vinagre-debuginfoUpgrade vala-debugsourceUpgrade baobabUpgrade gnome-menus-debugsourceUpgrade mozjs60-develUpgrade gvfs-archiveUpgrade gtk3-immodule-xim-debuginfoUpgrade libxsltUpgrade gnome-control-center-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gdmUpgrade gvfs-mtp-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gvfs-clientUpgrade gnome-online-accounts-develUpgrade gvfs-afpUpgrade LibRaw-debugsourceUpgrade accountsservice-develUpgrade gnome-online-accountsUpgrade gvfs-develUpgrade LibRaw-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade gvfs-smbUpgrade gjs-debuginfoUpgrade gnome-boxesUpgrade gjs-tests-debuginfoUpgrade gnome-menus-develUpgrade mozjs52Upgrade gnome-software-editorUpgrade libvncserverUpgrade gnome-software-debuginfoUpgrade gvfs-client-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-menus-debuginfoUpgrade gvfs-afcUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-sessionUpgrade gnome-software-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-tweaksUpgrade gtk3-develUpgrade evince-libsUpgrade gvfs-goaUpgrade gtk3-tests-debuginfoUpgrade clutter-develUpgrade nautilus-develUpgrade mozjs52-debugsourceUpgrade gjs-develUpgrade gsettings-desktop-schemasUpgrade evince-debugsourceUpgrade nautilus-extensionsUpgrade mutterUpgrade valadoc-debuginfoUpgrade gvfs-debugsourceUpgrade gvfs-debuginfoUpgrade LibRawUpgrade evince-nautilusUpgrade gjs-debugsourceUpgrade evince-browser-pluginUpgrade libvncserver-develUpgrade gnome-remote-desktopUpgrade mutter-tests-debuginfoUpgrade gnome-control-centerUpgrade gvfs-goa-debuginfoUpgrade libxslt-debugsourceUpgrade appstream-dataUpgrade libvncserver-debugsourceUpgrade accountsserviceUpgrade gnome-boxes-debugsourceUpgrade gnome-online-accounts-debuginfoNo solution existsUpgrade gnome-software-editor-debuginfoUpgrade gnome-boxes-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade clutterUpgrade evince-debuginfoUpgrade accountsservice-debugsourceUpgrade libxslt-develUpgrade gtk3-devel-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gnome-session-wayland-sessionUpgrade valaUpgrade gjsUpgrade gnome-settings-daemon-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade clutter-debugsourceUpgrade mozjs52-develUpgrade mozjs60-debuginfoUpgrade gdm-debuginfoUpgrade gnome-shell-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-terminal-nautilus-debuginfo | Apr 29, 2020 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade clutter-docUpgrade mozjs60-debugsourceUpgrade mozjs52Upgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade baobab-debugsourceUpgrade gnome-menusUpgrade baobab-debuginfoUpgrade clutterUpgrade mozjs60Upgrade baobabUpgrade mozjs60-debuginfoUpgrade gnome-menus-debugsourceUpgrade clutter-develUpgrade mozjs52-develUpgrade mozjs60-develUpgrade clutter-debugsourceUpgrade gnome-menus-develUpgrade clutter-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-menus-debuginfo | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade gdm-branding-upstreamUpgrade libgdm1Upgrade gdm-develUpgrade gdmflexiserverUpgrade typelib-1_0-Gdm-1_0Upgrade gdmUpgrade gdm-systemdUpgrade gdm-lang | Mar 9, 2019 | Feb 6, 2019 |
| Ubuntu | — | Upgrade gdm3 | Feb 28, 2019 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub