Fluid Attacks Database

Description

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	gdm3	>=0 <2.30.5-9	2.30.5-9
debian 12	gdm3	>=0 <2.30.5-9	2.30.5-9
debian 14	gdm3	>=0 <2.30.5-9	2.30.5-9
debian 13	gdm3	>=0 <2.30.5-9	2.30.5-9
rpm rhel6	gdm	<1:2.30.4-21.el6_0.1	1:2.30.4-21.el6_0.1

Aliases

1. CVE-2011-07272. NVD-2011-07273. OSV-DEBIAN-2011-07274. OSV-2011-07275. SECURITY-TRACKER-CVE-2011-0727

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.