A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-menusUpgrade baobabUpgrade clutter-docUpgrade mozjs60Upgrade valaUpgrade vala-develUpgrade clutter-develUpgrade clutterUpgrade gnome-tweaksUpgrade gnome-menus-develUpgrade mozjs52Upgrade accountsservice-develUpgrade mozjs60-develUpgrade mozjs52-develUpgrade gjs-devel | May 4, 2022 | Feb 6, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 6, 2019 |
| Centos_linux | — | Upgrade mozjs52-debuginfoUpgrade gnome-terminalUpgrade gnome-tweaksUpgrade gnome-session-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-remote-desktopUpgrade gvfs-develUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-boxes-debuginfoUpgrade evince-browser-pluginUpgrade gnome-boxes-debugsourceUpgrade gnome-boxesUpgrade gvfs-gphoto2Upgrade gtk3-immodules-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade nautilusUpgrade gnome-control-center-debugsourceUpgrade libxslt-debugsourceUpgrade gvfs-fuseUpgrade evince-debugsourceUpgrade gvfs-debugsourceUpgrade evinceUpgrade gnome-terminal-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade mutter-debugsourceUpgrade LibRawUpgrade mozjs60-debuginfoUpgrade gnome-software-debuginfoUpgrade vinagreUpgrade accountsservice-debugsourceUpgrade gvfs-mtpUpgrade gsettings-desktop-schemasUpgrade gtk3-debuginfoUpgrade gnome-menusUpgrade libxsltUpgrade gdmUpgrade gnome-software-editorUpgrade gvfsUpgrade gvfs-afc-debuginfoUpgrade gnome-softwareUpgrade gnome-online-accountsUpgrade gvfs-smb-debuginfoUpgrade evince-libsUpgrade gnome-remote-desktop-debuginfoUpgrade nautilus-debuginfoUpgrade evince-libs-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gdm-debugsourceUpgrade gvfs-archiveUpgrade gnome-shellUpgrade libvncserver-debuginfoUpgrade baobab-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-control-center-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade libvncserverUpgrade gvfs-archive-debuginfoUpgrade baobab-debugsourceUpgrade gtk3-develUpgrade LibRaw-samples-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade vinagre-debuginfoUpgrade mozjs52Upgrade appstream-dataUpgrade gnome-terminal-nautilusUpgrade accountsservice-libs-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-terminal-nautilus-debuginfoUpgrade gjs-debuginfoUpgrade gnome-menus-debuginfoUpgrade gvfs-goaUpgrade gnome-sessionUpgrade LibRaw-debuginfoUpgrade accountsserviceUpgrade nautilus-extensionsUpgrade gtk-update-icon-cacheUpgrade gsettings-desktop-schemas-develUpgrade gtk3Upgrade gdm-debuginfoUpgrade gnome-session-debugsourceUpgrade clutter-tests-debuginfoUpgrade gnome-settings-daemonUpgrade baobabUpgrade mozjs60Upgrade gnome-shell-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gvfs-smbUpgrade gnome-software-debugsourceUpgrade gjs-debugsourceUpgrade gnome-session-wayland-sessionUpgrade libxslt-debuginfoUpgrade mutterUpgrade gnome-terminal-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade nautilus-debugsourceUpgrade mutter-tests-debuginfoUpgrade gvfs-clientUpgrade gvfs-afpUpgrade gnome-remote-desktop-debugsourceUpgrade mozjs60-debugsourceUpgrade evince-nautilus-debuginfoUpgrade gnome-menus-debugsourceUpgrade LibRaw-debugsourceUpgrade gtk3-immodule-ximUpgrade clutter-debugsourceUpgrade accountsservice-libsUpgrade clutterUpgrade gvfs-goa-debuginfoUpgrade gnome-session-xsessionUpgrade evince-debuginfoUpgrade gvfs-afp-debuginfoUpgrade mozjs52-debugsourceUpgrade gnome-control-center-filesystemUpgrade gvfs-debuginfoUpgrade mutter-debuginfoUpgrade gtk3-devel-debuginfoUpgrade libvncserver-debugsourceUpgrade gvfs-gphoto2-debuginfoUpgrade clutter-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gvfs-afcUpgrade gnome-software-editor-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade vinagre-debugsourceUpgrade gtk3-debugsourceUpgrade gvfs-client-debuginfoUpgrade evince-nautilusUpgrade gvfs-fuse-debuginfoUpgrade libxslt-develUpgrade accountsservice-debuginfoUpgrade gjsUpgrade gnome-control-center | Apr 29, 2020 | Feb 6, 2019 |
| Debian | — | Upgrade gdm3 | Jul 30, 2024 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gdm | Feb 22, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gdm | Apr 30, 2021 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gdm | Dec 16, 2020 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade gnome-control-center-filesystemUpgrade accountsservice-develUpgrade gjs-develUpgrade evinceUpgrade gnome-online-accounts-develUpgrade gnome-shellUpgrade gsettings-desktop-schemasUpgrade gtk3Upgrade clutterUpgrade gdmUpgrade gtk3-immodule-ximUpgrade gnome-menusUpgrade mozjs52Upgrade clutter-docUpgrade libxsltUpgrade mutterUpgrade mutter-develUpgrade LibRawUpgrade nautilus-develUpgrade mozjs60-develUpgrade gsettings-desktop-schemas-develUpgrade vala-develUpgrade gnome-terminalUpgrade accountsserviceUpgrade gnome-tweaksUpgrade gnome-session-xsessionUpgrade gnome-softwareUpgrade gtk3-develUpgrade gnome-sessionUpgrade clutter-develUpgrade evince-browser-pluginUpgrade libvncserverUpgrade LibRaw-develUpgrade gnome-control-centerUpgrade gnome-software-editorUpgrade gnome-boxesUpgrade mozjs60Upgrade valaUpgrade gnome-remote-desktopUpgrade libxslt-develUpgrade gnome-settings-daemonUpgrade gnome-online-accountsUpgrade evince-libsUpgrade vinagreUpgrade gtk-update-icon-cacheUpgrade gnome-menus-develUpgrade gjsUpgrade accountsservice-libsUpgrade mozjs52-develUpgrade nautilusUpgrade gnome-session-wayland-sessionUpgrade appstream-dataUpgrade nautilus-extensionsUpgrade evince-nautilusUpgrade libvncserver-develUpgrade gnome-terminal-nautilus | Jul 22, 2024 | Feb 6, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 6, 2019 |
| Redhat_linux | — | Upgrade gnome-sessionUpgrade gnome-session-wayland-sessionUpgrade gnome-tweaksUpgrade libvncserverUpgrade gvfs-smbUpgrade gnome-terminal-debugsourceUpgrade gnome-software-debugsourceUpgrade gnome-menus-debuginfoUpgrade libxslt-debugsourceUpgrade nautilus-extensions-debuginfoUpgrade gdm-debuginfoUpgrade gjs-tests-debuginfoUpgrade gnome-terminal-nautilusUpgrade gsettings-desktop-schemasUpgrade nautilus-extensionsUpgrade evince-debugsourceUpgrade evince-nautilusUpgrade gtk3-tests-debuginfoUpgrade mozjs52-debugsourceUpgrade gjsUpgrade evince-libsUpgrade gnome-online-accountsUpgrade gjs-debuginfoUpgrade gnome-menus-develUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-boxesUpgrade mutter-tests-debuginfoUpgrade gjs-develUpgrade gjs-debugsourceUpgrade gnome-software-debuginfoUpgrade gvfs-develUpgrade gnome-shell-debugsourceUpgrade gnome-remote-desktopUpgrade gvfs-goa-debuginfoUpgrade appstream-dataUpgrade LibRaw-debuginfoUpgrade valadoc-debuginfoUpgrade accountsserviceUpgrade gnome-settings-daemon-debugsourceUpgrade mozjs52-develUpgrade gvfs-gphoto2-debuginfoUpgrade evince-debuginfoUpgrade evince-browser-pluginUpgrade gvfs-goaUpgrade gvfs-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gtk3-develUpgrade mozjs60-debuginfoUpgrade mozjs52Upgrade nautilus-develUpgrade gnome-session-debugsourceUpgrade libvncserver-develUpgrade clutterUpgrade gnome-software-editor-debuginfoUpgrade gnome-terminal-nautilus-debuginfoUpgrade gnome-boxes-debugsourceUpgrade clutter-develUpgrade gtk3-devel-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-boxes-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade valaUpgrade libvncserver-debugsourceUpgrade mutterUpgrade gvfs-debuginfoUpgrade LibRawUpgrade gnome-settings-daemon-debuginfoUpgrade accountsservice-debugsourceUpgrade gvfs-client-debuginfoUpgrade gvfs-afcUpgrade mozjs52-devel-debuginfoUpgrade gnome-control-centerNo solution existsUpgrade clutter-debugsourceUpgrade gnome-software-editorUpgrade libxslt-develUpgrade gnome-menusUpgrade gtk-update-icon-cacheUpgrade LibRaw-develUpgrade gnome-terminalUpgrade LibRaw-debugsourceUpgrade gnome-control-center-filesystemUpgrade gdmUpgrade nautilus-debuginfoUpgrade gtk3-immodule-ximUpgrade accountsservice-libs-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade baobabUpgrade gnome-control-center-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gvfs-clientUpgrade mozjs52-debuginfoUpgrade vala-develUpgrade clutter-debuginfoUpgrade vala-debuginfoUpgrade gvfs-afc-debuginfoUpgrade accountsservice-develUpgrade gnome-settings-daemonUpgrade clutter-docUpgrade mutter-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gvfs-gphoto2Upgrade mozjs60-debugsourceUpgrade vinagreUpgrade nautilusUpgrade gnome-control-center-debugsourceUpgrade gnome-session-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade libxslt-debuginfoUpgrade vinagre-debugsourceUpgrade gtk3Upgrade gvfs-mtp-debuginfoUpgrade gnome-shellUpgrade accountsservice-libsUpgrade gsettings-desktop-schemas-develUpgrade gnome-terminal-debuginfoUpgrade clutter-tests-debuginfoUpgrade mozjs60Upgrade gnome-softwareUpgrade evince-libs-debuginfoUpgrade gvfs-fuseUpgrade nautilus-debugsourceUpgrade gnome-menus-debugsourceUpgrade baobab-debugsourceUpgrade gtk3-debuginfoUpgrade vinagre-debuginfoUpgrade libvncserver-debuginfoUpgrade evinceUpgrade mutter-debuginfoUpgrade gvfs-mtpUpgrade gtk-update-icon-cache-debuginfoUpgrade gdm-debugsourceUpgrade vala-debugsourceUpgrade evince-browser-plugin-debuginfoUpgrade gtk3-debugsourceUpgrade gvfsUpgrade mutter-develUpgrade mozjs60-develUpgrade gnome-online-accounts-develUpgrade baobab-debuginfoUpgrade gvfs-archiveUpgrade libxsltUpgrade gvfs-afpUpgrade gnome-shell-debuginfoUpgrade gnome-session-xsessionUpgrade evince-nautilus-debuginfo | Apr 29, 2020 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade baobab-debugsourceUpgrade clutter-docUpgrade mozjs52-debugsourceUpgrade mozjs52Upgrade baobab-debuginfoUpgrade clutterUpgrade gnome-menusUpgrade mozjs60Upgrade baobabUpgrade mozjs60-debugsourceUpgrade mozjs60-debuginfoUpgrade mozjs52-devel-debuginfoUpgrade gnome-menus-develUpgrade gnome-menus-debugsourceUpgrade mozjs60-develUpgrade clutter-develUpgrade mozjs52-develUpgrade mozjs52-debuginfoUpgrade clutter-debugsourceUpgrade gnome-menus-debuginfoUpgrade clutter-debuginfo | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade gdmUpgrade typelib-1_0-Gdm-1_0Upgrade gdm-langUpgrade gdm-systemdUpgrade gdmflexiserverUpgrade libgdm1Upgrade gdm-develUpgrade gdm-branding-upstream | Mar 9, 2019 | Feb 6, 2019 |
| Ubuntu | — | Upgrade gdm3 | Feb 28, 2019 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub