In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-native-window-placementUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-dash-to-panelUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-places-menuUpgrade gnome-shellUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shell-extension-auto-move-windows | Aug 22, 2024 | May 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade gnome-shellUpgrade gnome-shell-debuginfo | Dec 20, 2024 | May 28, 2024 |
| Debian | — | No solution existsUpgrade gnome-shell | May 15, 2025 | May 28, 2024 |
| Oracle_linux | — | Upgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shellUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-dash-to-panelUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shell-extension-dash-to-dock | Oct 16, 2024 | May 28, 2024 |
| Redhat_linux | — | Upgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-debugsourceNo solution existsUpgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-commonUpgrade gnome-shell-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shellUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shell-extension-dash-to-panelUpgrade gnome-shell-extension-user-theme | Sep 13, 2024 | May 28, 2024 |
| Rocky_linux | — | Upgrade gnome-shell-debuginfoUpgrade gnome-shellUpgrade gnome-shell-debugsource | May 8, 2025 | May 28, 2024 |
| Suse | — | Upgrade gnome-shell-browser-pluginUpgrade gnome-shellUpgrade gnome-extensionsUpgrade gnome-shell-develUpgrade gnome-shell-langUpgrade gnome-shell-calendar | Jul 23, 2024 | May 28, 2024 |
| Ubuntu | — | Upgrade gnome-shell | Aug 19, 2024 | May 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub