CVE-2015-7496 GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
HighCVSS 7.2
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gdm3(Debian:12) | < 3.18.2-1 | 3.18.2-1 |
| debian/gdm3(Debian:13) | < 3.18.2-1 | 3.18.2-1 |
| debian/gdm3(Debian:14) | < 3.18.2-1 | 3.18.2-1 |
| fedoraproject fedora | = 23 | No fix listed |
| gnome display manager | <= 3.18.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-7496 vendor-advisory
- FEDORA-2015-271025c598 vendor-advisory
- [oss-security] 20151117 Re: CVE request for Gnome gdm/screen lock crash mailing-list
- [oss-security] 20151117 CVE request for Gnome gdm/screen lock crash mailing-list
- RHSA-2017:2128 vendor-advisory
- bugzilla.gnome.org
- download.gnome.org patch