Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 7 MGASA-2021-0003: High Risk GDM Privilege Escalation

mageia
Calendar Grey January 4, 2021
Dist Mageia Esm H88
The newest revision of VortexOS's login manager tackles a potential security flaw that permits unauthorized access to system features owing to misconfigurations.
Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable

Summary

Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user (CVE-2020-16125).

References

- https://bugs.mageia.org/show_bug.cgi?id=27566

- https://ubuntu.com/security/notices/USN-4614-1

-

- https://www.cve.org/CVERecord?id=CVE-2020-16125

Topics%20covered

Topics Covered

security advisory privilege escalation access control local attack gdm GDM high risk Mageia mageia

Resolution

SRPMS

- 7/core/gdm-3.32.0-1.1.mga7

Publication date: 04 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0003.html
Type: security
CVE: CVE-2020-16125

Topics%20covered

Topics Covered

security advisory privilege escalation access control local attack gdm GDM high risk Mageia mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here