A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mozjs60-develUpgrade gnome-tweaksUpgrade mozjs52Upgrade gnome-menus-develUpgrade clutter-develUpgrade clutterUpgrade mozjs52-develUpgrade accountsservice-develUpgrade gjs-develUpgrade mozjs60Upgrade valaUpgrade gnome-menusUpgrade clutter-docUpgrade baobabUpgrade vala-devel | May 4, 2022 | Feb 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 6, 2019 |
| Centos_linux | — | Upgrade gjs-debugsourceUpgrade mutterUpgrade gnome-software-debugsourceUpgrade mutter-tests-debuginfoUpgrade accountsserviceUpgrade gsettings-desktop-schemas-develUpgrade gtk3-debugsourceUpgrade evince-nautilusUpgrade gvfs-client-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade vinagre-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade libxslt-debuginfoUpgrade gtk3Upgrade gvfs-goa-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade gvfs-debuginfoUpgrade mutter-debuginfoUpgrade gnome-control-center-filesystemUpgrade nautilus-debugsourceUpgrade gvfs-smbUpgrade gvfs-goaUpgrade mozjs52-debugsourceUpgrade mozjs52-devel-debuginfoUpgrade gtk3-devel-debuginfoUpgrade accountsservice-libsUpgrade gnome-control-centerUpgrade gnome-session-wayland-sessionUpgrade clutterUpgrade clutter-debuginfoUpgrade gvfs-afp-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gnome-sessionUpgrade clutter-debugsourceUpgrade gvfs-afpUpgrade gnome-session-debugsourceUpgrade LibRaw-debugsourceUpgrade gdm-debuginfoUpgrade gtk3-immodule-ximUpgrade nautilus-extensionsUpgrade gnome-terminal-debuginfoUpgrade mozjs60-debugsourceUpgrade LibRaw-debuginfoUpgrade gnome-session-xsessionUpgrade gtk-update-icon-cacheUpgrade gnome-software-editor-debuginfoUpgrade mozjs60Upgrade baobabUpgrade clutter-tests-debuginfoUpgrade gnome-settings-daemonUpgrade gvfs-clientUpgrade gjs-debuginfoUpgrade evince-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-menus-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-menus-debuginfoUpgrade gjsUpgrade gvfs-afcUpgrade libxslt-develUpgrade gvfs-gphoto2-debuginfoUpgrade libvncserver-debugsourceUpgrade gtk3-tests-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade libxslt-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gnome-terminal-debugsourceUpgrade gnome-softwareUpgrade gvfs-gphoto2Upgrade vinagre-debuginfoUpgrade libvncserver-debuginfoUpgrade gnome-remote-desktopUpgrade baobab-debuginfoUpgrade evince-browser-pluginUpgrade evince-debugsourceUpgrade evinceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-online-accountsUpgrade evince-libs-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gvfs-mtpUpgrade gvfs-smb-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gnome-tweaksUpgrade nautilus-debuginfoUpgrade mutter-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gnome-terminalUpgrade gnome-shell-debugsourceUpgrade gnome-online-accounts-develUpgrade LibRawUpgrade baobab-debugsourceUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gnome-boxesUpgrade gnome-shellUpgrade evince-browser-plugin-debuginfoUpgrade nautilusUpgrade gvfs-mtp-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-session-debuginfoUpgrade gvfs-debugsourceUpgrade gjs-tests-debuginfoUpgrade gvfs-develUpgrade gtk-update-icon-cache-debuginfoUpgrade mozjs52-debuginfoUpgrade gnome-boxes-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gvfs-afc-debuginfoUpgrade appstream-dataUpgrade mozjs60-debuginfoUpgrade libvncserverUpgrade gvfs-archiveUpgrade mozjs52Upgrade gvfs-fuseUpgrade gtk3-develUpgrade gdm-debugsourceUpgrade gtk3-debuginfoUpgrade evince-libsUpgrade gsettings-desktop-schemasUpgrade gdmUpgrade vinagreUpgrade gnome-control-center-debuginfoUpgrade gvfsUpgrade accountsservice-debugsourceUpgrade gnome-menusUpgrade libxsltUpgrade gnome-software-editorUpgrade gnome-software-debuginfo | Apr 29, 2020 | Feb 6, 2019 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Feb 22, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdm | Apr 30, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdm | Dec 16, 2020 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade nautilus-develUpgrade libxsltUpgrade mozjs60-develUpgrade mutterUpgrade clutterUpgrade mutter-develUpgrade clutter-docUpgrade mozjs52Upgrade gnome-terminalUpgrade gnome-shellUpgrade evinceUpgrade accountsserviceUpgrade LibRawUpgrade gtk3-immodule-ximUpgrade gnome-online-accounts-develUpgrade gjs-develUpgrade gsettings-desktop-schemasUpgrade gnome-control-center-filesystemUpgrade gtk3Upgrade accountsservice-develUpgrade gnome-menusUpgrade gnome-session-xsessionUpgrade vala-develUpgrade gnome-softwareUpgrade gnome-tweaksUpgrade gdmUpgrade gsettings-desktop-schemas-develUpgrade nautilusUpgrade mozjs52-develUpgrade libxslt-develUpgrade evince-libsUpgrade accountsservice-libsUpgrade gnome-sessionUpgrade nautilus-extensionsUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade appstream-dataUpgrade gnome-remote-desktopUpgrade LibRaw-develUpgrade mozjs60Upgrade gnome-terminal-nautilusUpgrade clutter-develUpgrade libvncserver-develUpgrade valaUpgrade gtk3-develUpgrade vinagreUpgrade gnome-control-centerUpgrade gtk-update-icon-cacheUpgrade gnome-menus-develUpgrade gnome-software-editorUpgrade gjsUpgrade libvncserverUpgrade gnome-online-accountsUpgrade gnome-settings-daemonUpgrade gnome-session-wayland-sessionUpgrade gnome-boxes | Jul 22, 2024 | Feb 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 6, 2019 |
| Redhat_linux | — | Upgrade evince-libsUpgrade nautilus-develUpgrade gtk3-develUpgrade accountsservice-debugsourceUpgrade clutterUpgrade gvfs-goaUpgrade gnome-session-debugsourceUpgrade gnome-tweaksUpgrade gnome-terminal-debugsourceUpgrade accountsserviceUpgrade gnome-software-debugsourceUpgrade gjs-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gjs-develUpgrade gtk3-tests-debuginfoUpgrade gnome-remote-desktopUpgrade mozjs52-develUpgrade nautilus-extensionsUpgrade evince-debugsourceUpgrade mozjs52-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-debuginfoUpgrade gnome-boxesUpgrade gjsUpgrade gnome-session-wayland-sessionUpgrade libvncserver-debugsourceUpgrade gvfs-smbUpgrade clutter-debugsourceUpgrade gdm-debuginfoUpgrade gnome-online-accountsUpgrade LibRaw-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gvfs-develUpgrade libxslt-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade libxslt-develUpgrade gnome-boxes-debugsourceUpgrade gjs-tests-debuginfoUpgrade gvfs-debuginfoUpgrade clutter-develUpgrade gnome-software-editor-debuginfoUpgrade LibRawUpgrade gtk3-devel-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade valadoc-debuginfoUpgrade evince-debuginfoUpgrade gvfs-client-debuginfoUpgrade mutterUpgrade gvfs-afcUpgrade mozjs60-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-software-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gnome-menus-debuginfoUpgrade libvncserverUpgrade gvfs-debugsourceUpgrade libvncserver-develUpgrade evince-nautilusUpgrade appstream-dataUpgrade gvfs-smb-debuginfoUpgrade mozjs52Upgrade gjs-debuginfoUpgrade gnome-terminal-nautilusUpgrade gnome-menus-develUpgrade mutter-tests-debuginfoUpgrade gnome-control-centerUpgrade gvfs-goa-debuginfoUpgrade gnome-sessionUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade valaUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-shell-debugsourceNo solution existsUpgrade evince-browser-pluginUpgrade gnome-software-editorUpgrade clutter-docUpgrade gvfs-mtpUpgrade libvncserver-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gdmUpgrade evince-browser-plugin-debuginfoUpgrade gnome-session-xsessionUpgrade vala-debugsourceUpgrade clutter-debuginfoUpgrade nautilus-debuginfoUpgrade libxslt-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gtk3Upgrade gnome-shellUpgrade nautilus-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade nautilusUpgrade mozjs60Upgrade gvfs-fuseUpgrade accountsservice-libsUpgrade evince-libs-debuginfoUpgrade clutter-tests-debuginfoUpgrade vala-develUpgrade gvfs-afc-debuginfoUpgrade mozjs52-debuginfoUpgrade vala-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-menus-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gtk-update-icon-cacheUpgrade vinagre-debuginfoUpgrade gdm-debugsourceUpgrade baobabUpgrade gnome-terminalUpgrade mozjs60-develUpgrade gtk3-debuginfoUpgrade gnome-softwareUpgrade vinagreUpgrade baobab-debuginfoUpgrade gnome-terminal-debuginfoUpgrade gnome-settings-daemonUpgrade accountsservice-develUpgrade mutter-debugsourceUpgrade mutter-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gvfs-gphoto2Upgrade gvfsUpgrade evinceUpgrade gnome-control-center-filesystemUpgrade vinagre-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade baobab-debugsourceUpgrade gvfs-clientUpgrade gvfs-afp-debuginfoUpgrade gvfs-archiveUpgrade gvfs-afpUpgrade libxsltUpgrade gnome-control-center-debuginfoUpgrade gnome-online-accounts-develUpgrade gtk3-immodule-xim-debuginfoUpgrade LibRaw-debugsourceUpgrade gtk3-immodule-ximUpgrade mutter-develUpgrade gnome-shell-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade LibRaw-develUpgrade gtk3-immodules-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-menus | Apr 29, 2020 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade clutter-debugsourceUpgrade gnome-menus-develUpgrade gnome-menus-debuginfoUpgrade mozjs52-debuginfoUpgrade mozjs60-develUpgrade clutter-debuginfoUpgrade gnome-menus-debugsourceUpgrade clutter-develUpgrade mozjs52-develUpgrade mozjs52-devel-debuginfoUpgrade clutter-docUpgrade gnome-menusUpgrade clutterUpgrade mozjs52-debugsourceUpgrade baobab-debuginfoUpgrade baobab-debugsourceUpgrade mozjs52Upgrade baobabUpgrade mozjs60-debugsourceUpgrade mozjs60-debuginfoUpgrade mozjs60 | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade gdm-branding-upstreamUpgrade gdmflexiserverUpgrade libgdm1Upgrade gdm-develUpgrade gdm-systemdUpgrade gdm-langUpgrade typelib-1_0-Gdm-1_0Upgrade gdm | Mar 9, 2019 | Feb 6, 2019 |
| Ubuntu | — | Upgrade gdm3 | Feb 28, 2019 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub