Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2014-7300

Date: December 25, 2014

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.

Language: C

Severity Score

Related Resources (9)

https://people.canonical.com/~ubuntu-security/cve/CVE-2014-7300
http://openwall.com/lists/oss-security/2014/09/29/17
https://git.gnome.org/browse/gnome-shell/commit/?id=a72dca361080ffc9f45ff90188a7cf013c3c4013
https://git.gnome.org/browse/gnome-shell/commit/?id=f02b007337e61436aaa0e81a86ad707b6d277378
https://bugzilla.gnome.org/show_bug.cgi?id=737456
http://rhn.redhat.com/errata/RHSA-2015-0535.html
https://nvd.nist.gov/vuln/detail/CVE-2014-7300
https://access.redhat.com/security/cve/CVE-2014-7300
https://www.mend.io/vulnerability-database/CVE-2014-7300

Severity Score

Weakness Type (CWE)

Resource Management Errors

CWE-399

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us