All errata/sisyphus/ALT-PU-2018-2142-1
ALT-PU-2018-2142-1

Package update gdm in branch sisyphus

Version3.28.3-alt1
Published2018-08-14
Max severityHIGH
Severity:

Closed issues (1)

CVE-2018-14424
HIGH7.8

The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.

Published: 2018-08-14Modified: 2024-11-21
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS 3.xHIGH 7.8
CVSS:3.x/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H