It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gnome-shell | Gnome | 3.15.91 (including) | 3.30.3 (excluding) |
| Gnome-shell | Gnome | 3.31.0 (including) | 3.31.5 (excluding) |
| Gnome-shell | Ubuntu | bionic | * |
| Gnome-shell | Ubuntu | cosmic | * |
| Gnome-shell | Ubuntu | disco | * |
| Gnome-shell | Ubuntu | esm-apps/xenial | * |
| Gnome-shell | Ubuntu | upstream | * |
| Gnome-shell | Ubuntu | xenial | * |
| Red Hat Ansible Tower 3.5 for RHEL 7 | RedHat | ansible-tower-35/ansible-tower:3.5.6-1 | * |
| Red Hat Ansible Tower 3.6 for RHEL 7 | RedHat | ansible-tower-36/ansible-tower:3.6.4-1 | * |
| Red Hat Enterprise Linux 7 | RedHat | accountsservice-0:0.6.50-7.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | colord-0:1.3.4-2.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | control-center-1:3.28.1-6.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | gdm-1:3.28.2-22.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | gnome-online-accounts-0:3.28.2-1.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | gnome-settings-daemon-0:3.28.1-8.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | gnome-shell-0:3.28.3-24.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | gnome-shell-extensions-0:3.28.1-11.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | gnome-tweak-tool-0:3.28.1-7.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | gsettings-desktop-schemas-0:3.28.0-3.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | gtk3-0:3.22.30-5.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | libcanberra-0:0.30-9.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | libgweather-0:3.28.2-3.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | LibRaw-0:0.19.4-1.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | mutter-0:3.28.3-20.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | nautilus-0:3.26.3.1-7.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | osinfo-db-0:20190805-2.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | shared-mime-info-0:1.8-5.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | tracker-0:1.10.5-8.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | xchat-1:2.8.8-25.el7 | * |
| Red Hat Enterprise Linux 8 | RedHat | accountsservice-0:0.6.50-7.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | appstream-data-0:8-20190805.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | baobab-0:3.28.0-2.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | chrome-gnome-shell-0:10.1-6.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | evince-0:3.28.4-3.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | file-roller-0:3.28.1-2.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gdk-pixbuf2-0:2.36.12-5.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gdm-1:3.28.3-22.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gjs-0:1.56.2-3.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-control-center-0:3.28.2-5.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-desktop3-0:3.32.2-1.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-remote-desktop-0:0.1.6-5.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-settings-daemon-0:3.32.0-4.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-shell-0:3.32.2-9.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-shell-extensions-0:3.32.1-10.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-software-0:3.30.6-2.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-tweaks-0:3.28.1-6.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gsettings-desktop-schemas-0:3.32.0-3.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gtk3-0:3.22.30-4.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gvfs-0:1.36.2-6.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | mozjs60-0:60.9.0-3.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | mutter-0:3.32.2-10.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | nautilus-0:3.28.1-10.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | pango-0:1.42.4-6.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | pidgin-0:2.13.0-5.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | plymouth-0:0.9.3-15.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | SDL-0:1.2.15-35.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | wayland-protocols-0:1.17-1.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | webkit2gtk3-0:2.24.3-1.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | accountsservice-0:0.6.50-7.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | appstream-data-0:8-20190805.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | baobab-0:3.28.0-2.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | chrome-gnome-shell-0:10.1-6.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | evince-0:3.28.4-3.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | file-roller-0:3.28.1-2.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gdk-pixbuf2-0:2.36.12-5.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gdm-1:3.28.3-22.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gjs-0:1.56.2-3.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-control-center-0:3.28.2-5.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-desktop3-0:3.32.2-1.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-remote-desktop-0:0.1.6-5.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-settings-daemon-0:3.32.0-4.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-shell-0:3.32.2-9.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-shell-extensions-0:3.32.1-10.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-software-0:3.30.6-2.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gnome-tweaks-0:3.28.1-6.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gsettings-desktop-schemas-0:3.32.0-3.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gtk3-0:3.22.30-4.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | gvfs-0:1.36.2-6.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | mozjs60-0:60.9.0-3.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | mutter-0:3.32.2-10.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | nautilus-0:3.28.1-10.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | pango-0:1.42.4-6.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | pidgin-0:2.13.0-5.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | plymouth-0:0.9.3-15.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | SDL-0:1.2.15-35.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | wayland-protocols-0:1.17-1.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | webkit2gtk3-0:2.24.3-1.el8 | * |