CVE-2018-14424

The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to…

published August 14, 2018

CVSS
—
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00536 · 44.4th percentile
Published
2018-08-14T16:00Z
EPSS history
Timeline
  • 14 AUG 16:00Z
    The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to…
    cvelistv5