Lucene search
Veracode Vulnerability DatabaseVERACODE:28797HistoryDec 22, 2020 - 8:09 p.m.
Authentication Bypass
2020-12-2220:09:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
30.1%
gdm3 is vulnerable to timing attacks. The vulnerability exists through a race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gdm3:sid | eq | 3.38.2-1 | |
| gdm3:bullseye | eq | 3.38.2-1 |
Related
nessus
nessus
Fedora 33 : 1:gdm (2020-1650d8012f)
2020-12-22 00:00:00
RHEL 6 : gdm (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : gdm (Unpatched Vulnerability)
2024-05-11 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: gdm-3.38.2.1-1.fc33
2020-12-22 01:30:19
openvas
openvas
Fedora: Security Advisory for gdm (FEDORA-2020-1650d8012f)
2020-12-22 00:00:00
osv
osv
CVE-2020-27837
2020-12-28 19:15:13
nvd
nvd
CVE-2020-27837
2020-12-28 19:15:13
cvelist
cvelist
CVE-2020-27837
2020-12-28 18:34:04
debiancve
debiancve
CVE-2020-27837
2020-12-28 19:15:13
redhatcve
redhatcve
CVE-2020-27837
2020-12-16 14:58:33
cve
cve
CVE-2020-27837
2020-12-28 19:15:13
ubuntucve
ubuntucve
CVE-2020-27837
2020-12-28 00:00:00
prion
prion
Race condition
2020-12-28 19:15:00