Fluid Attacks Database

Description

GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	gtk+3.0	>=0 <3.11.8-1	3.11.8-1
debian 13	gtk+3.0	>=0 <3.11.8-1	3.11.8-1
debian 12	cinnamon	>=0 <2.2.14-1	2.2.14-1
debian 14	cinnamon	>=0 <2.2.14-1	2.2.14-1
debian 14	gtk+3.0	>=0 <3.11.8-1	3.11.8-1
debian 11	cinnamon	>=0 <2.2.14-1	2.2.14-1
debian 12	gtk+3.0	>=0 <3.11.8-1	3.11.8-1
debian 13	cinnamon	>=0 <2.2.14-1	2.2.14-1

Aliases

1. CVE-2014-19492. NVD-2014-19493. OSV-DEBIAN-2014-19494. OSV-2014-19495. SECURITY-TRACKER-CVE-2014-1949

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.