CVE-2013-2190 The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which ca...
LowCVSS 2.1
EPSS 0.53%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous gnome-shell session via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/clutter-1.0(Debian:12) | < 1.14.4-3 | 1.14.4-3 |
| debian/clutter-1.0(Debian:13) | < 1.14.4-3 | 1.14.4-3 |
| debian/clutter-1.0(Debian:14) | < 1.14.4-3 | 1.14.4-3 |
| clutter project clutter | All versions | No fix listed |
| opensuse | = 12.2 | No fix listed |
| opensuse | = 12.3 | No fix listed |
References
- Debian Security Tracker CVE-2013-2190 vendor-advisory
- openSUSE-SU-2013:1540 vendor-advisory
- [oss-security] 20130618 Re: CVE request: gnome-shell crash, screen unlock on resume mailing-list
- bugzilla.gnome.org
- bugzilla.redhat.com
- git.gnome.org exploit patch
- git.gnome.org
- bugs.debian.org issue-tracking