UBUNTU-CVE-2021-20315
Dashboard / Vulnerabilities / UBUNTU-CVE-2021-20315
Summary:
Details: A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.
References: https://ubuntu.com/security/CVE-2021-20315, https://bugzilla.redhat.com/show_bug.cgi?id=2006285, https://www.cve.org/CVERecord?id=CVE-2021-20315
Affected packages
Package
Name: gnome-shell
Purl: pkg:deb/ubuntu/[email protected]+esm1?arch=source&distro=esm-apps/xenial
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
3.16.4-0ubuntu1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
