CVE-2017-12164: Medium severity Gnome GNOME Display Manager vulnerability
Published Jul 26, 2018
·Updated
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ranonce boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.
Affected Software
1 affected component
Gnome GNOME Display Manager=3.24.1
Remediation
Patch Available
Patch Available
Event History
Jul 26, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2017-12164?
CVE-2017-12164 is a vulnerability in gdm 3.24.1 that allows an attacker to unlock the screen of a victim's system if autologin is enabled.
2
What is the severity of CVE-2017-12164?
CVE-2017-12164 has a severity rating of medium, with a severity value of 6.4.
3
What software is affected by CVE-2017-12164?
Gnome Display Manager version 3.24.1 is affected by CVE-2017-12164.
4
How can an attacker exploit CVE-2017-12164?
To exploit CVE-2017-12164, an attacker can simply select 'login as another user' on a system with autologin enabled.
5
Is there a fix for CVE-2017-12164?
Yes, the fix for CVE-2017-12164 can be found in the GitLab commit: https://gitlab.gnome.org/GNOME/gdm/commit/ff98b28