REDHAT-BUG-1391126: Low severity suse gdm vulnerability

Published Nov 2, 2016

Updated

Gnome GDM 3.14.2 and possibly later are vulnerable to an information disclosure vulnerability, specifically when a laptop screen is closed to trigger the screen lock, and the lid is then re-opened the previous contents of the screen are visible for approx. 1 second, which is long enough to take a picture or video record it before the lock screen kicks in.

Affected Software

1 affected component

Gnome gdm=3.14.2, >undefined

Event History

Nov 2, 2016

Data Sourced

via Red Hat·03:35 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1391126?

The severity of REDHAT-BUG-1391126 is categorized as information disclosure due to the risk of exposing sensitive data on the screen for a brief period.

How do I fix REDHAT-BUG-1391126?

To fix REDHAT-BUG-1391126, update to a later version of Gnome GDM that addresses this vulnerability.

Which versions of Gnome GDM are affected by REDHAT-BUG-1391126?

Gnome GDM versions 3.14.2 and possibly later are affected by REDHAT-BUG-1391126.

What happens when REDHAT-BUG-1391126 is exploited?

Exploiting REDHAT-BUG-1391126 allows an attacker to view the previous screen contents for approximately one second after reopening a laptop lid.

Is there a workaround for REDHAT-BUG-1391126?

A possible workaround for REDHAT-BUG-1391126 is to ensure that sensitive content is closed or locked before closing the laptop lid.