CVE Feed

    Dashboard / CVE / CVE-2021-3982

    CVE-2021-3982

    Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler priority leading to possible DoS of other services running in the same machine.

    Published:Nov 24, 2021
    Last Modified:Nov 21, 2024
    EPS:Apr 29, 2022
    EPSS Score:0.00034
    CVSS Score:5.5

    Affected Products

    Vendor
    Gnome
    Product
    Gnome-shell

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-43090 (CVSS 5.5) — A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to vi…
    CVE-2021-20315 (CVSS 6.1) — A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, …
    CVE-2020-17489 (CVSS 4.3) — An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an …
    CVE-2019-3820 (CVSS 4.3) — It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all context…
    CVE-2017-8288 (CVSS 8.1) — gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extension…
    CVE-2014-7300 (CVSS 7.2) — GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory co…
    CVE-2013-7221 (CVSS 4.6) — The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access t…
    CVE-2013-7220 (CVSS 4.6) — js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to exe…
    CVE-2012-4427 (CVSS 6.8) — The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitr…
    CVE-2010-4000 (CVSS 6.9) — gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows loc…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High