Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it contains invalid UTF8 encoded characters, which might allow local users to gain privileges by reading the information from syslog logs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNOME Display Manager 信任管理漏洞
Vulnerability Description
GNOME Display Manager（GDM，GNOME显示管理器）是GNOME项目所研发的一种GNOME显示环境的管理器，也是一个图形化登录程序。 GNOME Display Manager (gdm) 2.20.11之前的2.20.x版本中的vicious-extensions/ve-misc.c中存在漏洞，该漏洞源于在GDM debug程序启用的条件下，即便用户密码中包含无效的UTF8编码字符，系统也会将其录入。通过从系统日志读取信息，本地攻击者利用该漏洞获得特权。
CVSS Information
N/A
Vulnerability Type
N/A