CVE-2023-43090

概要

参考情報

• access.redhat.com/security/cve/CVE-2023-43090 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 · Exploit
• gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944 · Patch

gnome-shell のその他の脆弱性

• CVE-2021-20315中 6.1A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or…
• CVE-2020-17489中 4.3An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from…
• CVE-2019-3820中 4.3It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with …
• CVE-2017-8288高 8.1gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. …
• CVE-2014-7300高 7.2GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc …