Back to CVE Browser

CVE-2015-7496

HIGH

7.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile40.29th

PublishedNov 24, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key.

Affected Platforms (CPE)

💻

Fedoraproject

Fedora

= 23

📦

Gnome

Gnome Display Manager

<= 3.18.0

References & Advisories

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172328.html

🔗 http://www.openwall.com/lists/oss-security/2015/11/17/10

🔗 http://www.openwall.com/lists/oss-security/2015/11/17/8

🔗 https://access.redhat.com/errata/RHSA-2017:2128

🔗 https://bugzilla.gnome.org/show_bug.cgi?id=758032

🔗 https://download.gnome.org/sources/gdm/3.18/gdm-3.18.2.news

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172328.html

🔗 http://www.openwall.com/lists/oss-security/2015/11/17/10

Related Vulnerabilities

CVE-2012-265310.0

arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might...

CVE-2006-374210.0

The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login without a ...

CVE-2009-189610.0

The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedo...

CVE-2016-07269.8

The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it e...