gnome-shell crash, screen unlock on resume

2013.06.19
Risk: Low
Local: Yes
Remote: No
CWE: CWE-264


CVSS Base Score: 2.1/10
Impact Subscore: 2.9/10
Exploitability Subscore: 3.9/10
Exploit range: Local
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: None
Availability impact: None

Upstream GNOME recently fixed a bug that could crash gnome-shell immediately after resume: https://bugzilla.gnome.org/show_bug.cgi?id=701974 As noted here, the impact is that after resume, the password entry dialog disappears and the user is dropped into the pre-existing X session: https://bugzilla.redhat.com/show_bug.cgi?id=954054 I haven't figured out the exact trigger conditions, but this has happened to me a couple of times since switching to Fedora 19 last weekend. It does not appear to be a once-in-a-blue-moon bug. I think this needs to be tracked as a security bug because screen locking is a security feature (which is part of many security policies). -- Florian Weimer / Red Hat Product Security Team

References:

https://bugzilla.gnome.org/show_bug.cgi?id=701974
https://bugzilla.redhat.com/show_bug.cgi?id=954054


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top