Lucene search
Ubuntu.comUB:CVE-2023-43090HistorySep 18, 2023 - 12:00 a.m.
CVE-2023-43090
2023-09-1800:00:00
ubuntu.com
ubuntu.com
8
gnome shell
lock screen
vulnerability
unauthenticated
local user
desktop session
keyboard shortcuts
screenshot tool
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
A vulnerability was found in GNOME Shell. GNOME Shell’s lock screen allows
an unauthenticated local user to view windows of the locked desktop session
by using keyboard shortcuts to unlock the restricted functionality of the
screenshot tool.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052067>
- <https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990>
Notes
| Author | Note |
|---|---|
| mdeslaur | While the upstream bug says gnome-shell 42 is affected, I could not reproduce the issue on jammy |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 23.04 | noarch | gnome-shell | < 44.3-0ubuntu1.1 | UNKNOWN |
| ubuntu | 23.10 | noarch | gnome-shell | < 45.0-1ubuntu1 | UNKNOWN |
Related
osv
osv
CVE-2023-43090
2023-09-22 06:15:09
gnome-shell - security update
2023-09-18 00:00:00
redhatcve
redhatcve
CVE-2023-43090
2023-09-15 07:25:06
nessus
nessus
Debian DSA-5501-1 : gnome-shell - security update
2023-09-19 00:00:00
Ubuntu 23.04 : GNOME Shell vulnerability (USN-6395-1)
2023-09-21 00:00:00
mageia
mageia
Updated gnome-shell packages fix a security vulnerability
2023-11-09 15:55:51
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0311)
2023-11-10 00:00:00
Ubuntu: Security Advisory (USN-6395-1)
2023-09-22 00:00:00
Debian: Security Advisory (DSA-5501-1)
2023-09-19 00:00:00
prion
prion
Design/Logic Flaw
2023-09-22 06:15:00
debian
debian
[SECURITY] [DSA 5501-1] gnome-shell security update
2023-09-18 21:40:36
cvelist
cvelist
ubuntu
ubuntu
GNOME Shell vulnerability
2023-09-21 00:00:00
nvd
nvd
CVE-2023-43090
2023-09-22 06:15:09
alpinelinux
alpinelinux
CVE-2023-43090
2023-09-22 06:15:09
debiancve
debiancve
CVE-2023-43090
2023-09-22 06:15:09
veracode
veracode
Information Disclosure
2023-10-08 05:40:47
cve
cve
CVE-2023-43090
2023-09-22 06:15:09
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2023-43090