CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
26.7%
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.
Vendor | Product | Version | CPE |
---|---|---|---|
fedoraproject | fedora | 23 | cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:* |
gnome | gnome_display_manager | * | cpe:2.3:a:gnome:gnome_display_manager:*:*:*:*:*:*:*:* |
lists.fedoraproject.org/pipermail/package-announce/2015-November/172328.html
www.openwall.com/lists/oss-security/2015/11/17/10
www.openwall.com/lists/oss-security/2015/11/17/8
access.redhat.com/errata/RHSA-2017:2128
bugzilla.gnome.org/show_bug.cgi?id=758032
download.gnome.org/sources/gdm/3.18/gdm-3.18.2.news