Vulnerability CVE-2017-12164

Vulnerability Name:

CVE-2017-12164 (CCN-148270)

Assigned:

2017-08-01

Published:

2018-07-26

Updated:

2019-10-09

Summary:

A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.

CVSS v3 Severity:

6.4 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
5.6 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Physical Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

4.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
3.6 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Physical Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

4.3 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-665

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2017-12164

Source: CCN
Type: Red Hat Bugzilla Bug 1490417
(CVE-2017-12164) CVE-2017-12164 gdm: lock screen can be circumvented when autologin is set

Source: CONFIRM
Type: Issue Tracking, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12164

Source: XF
Type: UNKNOWN
gnome-gdm-cve201712164-sec-bypass(148270)

Source: CCN
Type: gdm GitLab Repository
manager: if falling back to X11 retry autologin

Source: CONFIRM
Type: Patch, Vendor Advisory
https://gitlab.gnome.org/GNOME/gdm/commit/ff98b28

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2017-12164

Vulnerable Configuration:

Configuration 1:

cpe:/a:gnome:gnome_display_manager:3.24.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:201712164	V	CVE-2017-12164	2023-06-22
oval:org.opensuse.security:def:7892	P	gdm-41.3-150400.4.6.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:629	P	Security update for python-Flask-Security-Too (Moderate) (in QA)	2022-09-27
oval:org.opensuse.security:def:740	P	Security update for icu (Moderate)	2022-09-07
oval:org.opensuse.security:def:3274	P	libusbmuxd4-1.0.10-2.3 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:94904	P	gdm-41.3-150400.2.7 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:1076	P	Security update for vim (Important)	2022-06-16
oval:org.opensuse.security:def:1660	P	Security update for libslirp (Important)	2022-04-29
oval:org.opensuse.security:def:1321	P	Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3) (Important)	2022-04-25
oval:org.opensuse.security:def:94015	P	(Important)	2022-04-12
oval:org.opensuse.security:def:100728	P	(Moderate)	2022-04-01
oval:org.opensuse.security:def:965	P	Security update for libcaca (Important)	2022-03-09
oval:org.opensuse.security:def:1432	P	Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP3) (Important)	2022-03-01
oval:org.opensuse.security:def:1188	P	Security update for glibc (Important)	2022-02-04
oval:org.opensuse.security:def:112281	P	gdm-3.38.2-2.7 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:105806	P	gdm-3.38.2-2.7 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:71227	P	libXRes1-1.2.0-1.18 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:47962	P	bash-4.3-83.23.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47479	P	python-cupshelpers-1.5.7-7.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47261	P	gdk-pixbuf-loader-rsvg-2.40.15-4.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48260	P	patch-2.7.5-8.5.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47703	P	libevent-2_0-5-2.0.21-6.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47276	P	gstreamer-1.8.3-9.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48065	P	libICE6-1.0.8-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47590	P	davfs2-1.5.2-2.3 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47151	P	sblim-sfcb-1.4.8-8.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48211	P	libunwind-1.1-11.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47814	P	libxml2-2-2.9.4-46.15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47286	P	hardlink-1.0-6.38 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48307	P	socat-1.7.2.4-3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48176	P	libpoppler-glib8-0.43.0-16.15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47611	P	ft2demos-2.6.3-7.15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47262	P	gdm-3.10.0.1-52.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48322	P	tboot-20190704_1.9.10-1.7 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47851	P	perl-HTML-Parser-3.71-1.145 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47397	P	libpoppler-glib8-0.43.0-15.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47150	P	ruby-2.1-1.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48149	P	libmodplug1-0.8.9.0+git20170610.f6dd59a-15.4.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47722	P	libipa_hbac0-1.16.1-2.8 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47165	P	tar-1.27.1-8.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48276	P	ppp-2.4.7-3.4 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:72468	P	gdm-3.34.1-8.15.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:62749	P	gdm-3.34.1-8.15.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101155	P	gdm-3.34.1-8.15.1 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:67774	P	Security update for the Linux Kernel (Live Patch 20 for SLE 15) (Important)	2021-07-14
oval:org.opensuse.security:def:1544	P	Security update for the Linux Kernel (Important)	2021-06-29
oval:org.opensuse.security:def:48378	P	bind-9.9.9P1-46.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48387	P	coreutils-8.25-12.8 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48489	P	libecpg6-9.4.9-14.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:71114	P	ucode-intel-20180425-1.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48418	P	freeradius-server-3.0.3-10.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:49463	P	Security update for nodejs10 (Important)	2021-03-02
oval:org.opensuse.security:def:69946	P	Security update for python (Important)	2021-02-09
oval:org.opensuse.security:def:64527	P	Security update for permissions (Moderate)	2021-01-22
oval:org.opensuse.security:def:66695	P	Security update for curl (Moderate)	2020-12-09
oval:org.opensuse.security:def:89871	P	gdm-3.26.2.1-13.19.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72240	P	gdm-3.26.2.1-13.19.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:103526	P	gdm-3.26.2.1-13.19.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62521	P	gdm-3.26.2.1-13.19.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72352	P	gdm-3.34.1-6.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:107394	P	gdm-3.34.1-6.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62633	P	gdm-3.34.1-6.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:116952	P	gdm-3.34.1-6.19 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:72129	P	gdm-3.26.2.1-11.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:62410	P	gdm-3.26.2.1-11.17 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:64440	P	Security update for python (Important)	2020-12-02
oval:org.opensuse.security:def:67874	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49352	P	w3m on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49629	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:66603	P	python3-Jinja2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:70051	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73386	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49406	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49575	P	librsvg-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:49517	P	gdm on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:73268	P	openslp on GA media (Moderate)	2020-12-01
oval:com.ubuntu.xenial:def:201712164000	V	CVE-2017-12164 on Ubuntu 16.04 LTS (xenial) - medium.	2018-07-26
oval:com.ubuntu.xenial:def:2017121640000000	V	CVE-2017-12164 on Ubuntu 16.04 LTS (xenial) - medium.	2018-07-26
oval:com.ubuntu.artful:def:201712164000	V	CVE-2017-12164 on Ubuntu 17.10 (artful) - medium.	2017-09-12

BACK