GNOME Vulnerabilities and Affected Products
Vulnerabilities associated with GDM3.
Products
Clear product- GLib10 vulnerabilities
- libsoup5 vulnerabilities
- Gdk-Pixbuf3 vulnerabilities
- GIMP3 vulnerabilities
- libxml23 vulnerabilities
- Evolution Data Server2 vulnerabilities
- libgsf2 vulnerabilities
- Ekiga1 vulnerability
- Epiphany1 vulnerability
- Evolution1 vulnerability
- Fonts Viewer1 vulnerability
- gdkpixbuf1 vulnerability
- gdm1 vulnerability
- GDM31 vulnerability
- glade1 vulnerability
- gnome-remote-desktop1 vulnerability
- gnome-shell1 vulnerability
- gvdb1 vulnerability
- librest1 vulnerability
- libxslt1 vulnerability
- malcontent1 vulnerability
- NetworkManager1 vulnerability
- Pango1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-16125HIGH | gdm3 would start gnome-initial-setup if it cannot contact accountservicegdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account. CWE-754Nov 10, 2020 | CVSS7.2v3.1 | EPSS1.11% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |