7.2

CVE-2014-7300

EPSS 0.47%
Veröffentlicht 25.12.2014 21:59:02
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gnome ≫ Gnome-shell Version 3.14.0

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Hpc Node Version 7.0

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Workstation Version 7.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.47%	0.371

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://openwall.com/lists/oss-security/2014/09/29/17

Third Party Advisory

Mailing List

http://rhn.redhat.com/errata/RHSA-2015-0535.html

Third Party Advisory

https://bugzilla.gnome.org/show_bug.cgi?id=737456

Vendor Advisory

Issue Tracking

https://git.gnome.org/browse/gnome-shell/commit/?id=a72dca361080ffc9f45ff90188a7cf013c3c4013

Patch

Issue Tracking

https://git.gnome.org/browse/gnome-shell/commit/?id=f02b007337e61436aaa0e81a86ad707b6d277378

Patch

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2014-7300

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-7300

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-7300

EUVD