PT-2018-12505
CVE-2018-14424
·
تاريخ النشر
2018-08-13
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
GDM versions prior to 3.29.1
ALT Linux (affected versions not specified)
Description
The issue arises from the daemon in GDM not properly unexporting display objects from its D-Bus interface when they are destroyed. This allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls. As a result, this can lead to a denial of service or potential code execution.
Recommendations
For GDM versions prior to 3.29.1, update to version 3.29.1 or later to resolve the issue.
At the moment, there is no information about a fix for ALT Linux.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾