VDB
GCVE-110-MAGEIA-2021-3
GCVE-110-MAGEIA-2021-3
Advisory Published
Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool
when the accountsservice daemon was not reachable. A local attacker able to
cause accountsservice to crash or stop responding could trick GDM into
launching the initial setup tool and create a privileged user (CVE-2020-16125).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | gdm | 0 (affected), 3.32.0-1.1.mga7 (unaffected), 0 (affected), 3.32.0-1.1.mga7 (unaffected) | — |
| Mageia | smartmontools | 7.2-1.mga7 (unaffected), 0 (affected) | — |
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.