GNOME Display Manager (GDM) 3.33.4

CPE Details

GNOME Display Manager (GDM) 3.33.4
gnome
gnome_display_manager
3.33.4
2020-11-17
17h11 +00:00
2020-11-17
17h11 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:gnome:gnome_display_manager:3.33.4:*:*:*:*:*:*:*

Informations

Vendor

gnome

Product

gnome_display_manager

Version

3.33.4

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-27837 2020-12-28 17h34 +00:00 A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.
6.4
Medium
CVE-2020-16125 2020-11-10 04h20 +00:00 gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.
7.2
High