Gnome Display Manager
Vendor:
First CVE: Dec 21, 2012 · Active for 13 years
10
Total CVEs
More Total CVEs than 89% of tracked products
1.4
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
5.4
Avg CVSS
Higher Avg CVSS than 16% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Gnome Display Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 21, 2012
13 years ago
Most Recent CVE
Dec 28, 2020
2,038 days ago
CVE Severity & Scoring
Gnome Display Manager10 CVEs
30%
50%
20%
All CVEs353,240 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local1 (10.0%)
Network0 (0.0%)
Unknown4 (40.0%)
Physical5 (50.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (30.0%)
High3 (30.0%)
Unknown4 (40.0%)
User Interaction
None6 (60.0%)
Unknown4 (40.0%)
Required0 (0.0%)
Privileges Required
Low1 (10.0%)
High0 (0.0%)
None5 (50.0%)
Unknown4 (40.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-14424HIGH The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-f | Aug 14, 2018 | 7.8 | 25 | NO | NO |
CVE-2017-12164MEDIUM A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply s | Jul 26, 2018 | 6.4 | 22 | NO | NO |
CVE-2020-27837MEDIUM A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologi | Dec 28, 2020 | 6.4 | 20 | NO | NO |
CVE-2015-7496HIGH GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key. | Nov 24, 2015 | 7.2 | 20 | NO | NO |
CVE-2020-16125MEDIUM gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially deriv | Nov 10, 2020 | 6.8 | 18 | NO | NO |
CVE-2013-4169MEDIUM GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X11-unix/. | Sep 10, 2013 | 6.9 | 18 | NO | NO |
CVE-2019-3825MEDIUM A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and wa | Feb 6, 2019 | 6.4 | 17 | NO | NO |
gdm3 3.14.2 and possibly later has an information leak before screen lock | Nov 5, 2019 | 2.4 | 14 | NO | NO |
GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel butto | Apr 29, 2014 | 2.1 | 13 | NO | NO |
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded character | Dec 21, 2012 | 1.9 | 13 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Gnome Display Manager
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.4.0.1 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.4.0 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.3.92.1 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.3.92 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.24.1 | 1 | 6.4 | 0.4% | 0 | 0 |
| 3.2.1.1 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.2.1 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.2.0 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.1.92 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.1.91 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.1.90 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.14.2 | 1 | 2.4 | 0.5% | 0 | 0 |
| 3.1.2 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.0.4 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.0.3 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.0.2 | 1 | 2.1 | 0.4% | 0 | 0 |
| 3.0.0 | 1 | 2.1 | 0.4% | 0 | 0 |
| 2.20.9 | 2 | 4.4 | 0.4% | 0 | 0 |
| 2.20.8 | 2 | 4.4 | 0.4% | 0 | 0 |
| 2.20.7 | 2 | 4.4 | 0.4% | 0 | 0 |