QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-14424

Back to search

CVE-2018-14424

Published: Aug 14, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.

VendorProductVersions

n/a

n/a

affected
n/a

References

USN-3737-1
vendor-advisory
x_refsource_UBUNTU
DSA-4270
vendor-advisory
x_refsource_DEBIAN
105179
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now