In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shellUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-places-menuUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-dash-to-panelUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-desktop-icons | Aug 22, 2024 | May 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade gnome-shell-debuginfoUpgrade gnome-shell | Dec 20, 2024 | May 28, 2024 |
| Debian | — | Upgrade gnome-shell | May 15, 2025 | May 28, 2024 |
| Oracle_linux | — | Upgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shellUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-dash-to-panelUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shell-extension-apps-menu | Oct 16, 2024 | May 28, 2024 |
| Redhat_linux | — | Upgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-classification-bannerUpgrade gnome-shell-extension-updates-dialogNo solution existsUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-custom-menuUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shellUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-heads-up-displayUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-dash-to-panel | Sep 13, 2024 | May 28, 2024 |
| Rocky_linux | — | Upgrade gnome-shell-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-shell | May 8, 2025 | May 28, 2024 |
| Suse | — | Upgrade gnome-shellUpgrade gnome-extensionsUpgrade gnome-shell-browser-pluginUpgrade gnome-shell-calendarUpgrade gnome-shell-langUpgrade gnome-shell-devel | Jul 23, 2024 | May 28, 2024 |
| Ubuntu | — | Upgrade gnome-shell | Aug 19, 2024 | May 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub