CVE Feed

    Dashboard / CVE / CVE-2013-7221

    CVE-2013-7221

    The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.

    Published:Nov 14, 2013
    Last Modified:Apr 12, 2025
    EPS:Apr 29, 2014
    EPSS Score:0.00067
    CVSS Score:4.6

    Affected Products

    Vendor
    Gnome
    Product
    Gnome-shell

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-43090 (CVSS 5.5) — A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to vi…
    CVE-2021-3982 (CVSS 5.5) — Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An atta…
    CVE-2021-20315 (CVSS 6.1) — A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, …
    CVE-2020-17489 (CVSS 4.3) — An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an …
    CVE-2019-3820 (CVSS 4.3) — It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all context…
    CVE-2017-8288 (CVSS 8.1) — gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extension…
    CVE-2014-7300 (CVSS 7.2) — GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory co…
    CVE-2013-7220 (CVSS 4.6) — js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to exe…
    CVE-2012-4427 (CVSS 6.8) — The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitr…
    CVE-2010-4000 (CVSS 6.9) — gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows loc…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High