https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:16:48 +0000 https://vulnerability.circl.lu/vuln/cve-2020-16125 <p><strong>Affected:</strong> Gnome GDM3</p> <p>gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can&#39;t contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.</p> <p><strong>Affected:</strong> Gnome GDM3</p> <p>gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can&#39;t contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.</p> https://vulnerability.circl.lu/vuln/cve-2020-16125 https://vulnerability.circl.lu/vuln/usn-4614-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: gdm3, Ubuntu:20.04:LTS: gdm3</p> <p>Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: gdm3, Ubuntu:20.04:LTS: gdm3</p> <p>Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user.</p> https://vulnerability.circl.lu/vuln/usn-4614-1