CVE-2013-7273 GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a u...
LowCVSS 2.1
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gdm3(Debian:12) | < 3.8.3-1 | 3.8.3-1 |
| debian/gdm3(Debian:13) | < 3.8.3-1 | 3.8.3-1 |
| debian/gdm3(Debian:14) | < 3.8.3-1 | 3.8.3-1 |
| gnome display manager | <= 3.4.1 | No fix listed |
| gnome display manager | = 3.0.0 | No fix listed |
| gnome display manager | = 3.0.2 | No fix listed |
| gnome display manager | = 3.0.3 | No fix listed |
| gnome display manager | = 3.0.4 | No fix listed |
| gnome display manager | = 3.1.2 | No fix listed |
| gnome display manager | = 3.1.90 | No fix listed |
| gnome display manager | = 3.1.91 | No fix listed |
| gnome display manager | = 3.1.92 | No fix listed |
| gnome display manager | = 3.2.0 | No fix listed |
| gnome display manager | = 3.2.1 | No fix listed |
| gnome display manager | = 3.2.1.1 | No fix listed |
| gnome display manager | = 3.3.92 | No fix listed |
| gnome display manager | = 3.3.92.1 | No fix listed |
| gnome display manager | = 3.4.0 | No fix listed |
| gnome display manager | = 3.4.0.1 | No fix listed |
References
- Debian Security Tracker CVE-2013-7273 vendor-advisory
- [oss-security] 20140107 CVE Re: request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference mailing-list
- [oss-security] 20140107 CVE Re: request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference mailing-list
- bugs.debian.org
- bugzilla.gnome.org
- bugzilla.redhat.com
- bugs.debian.org issue-tracking