CVE-2013-7221
published 2014-04-29CVE-2013-7221: The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows…
PriorityP429medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.41%
33.2th percentile
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
Affected
65 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gnome-shell | < gnome-shell 3.10.1-1 (bookworm) | gnome-shell 3.10.1-1 (bookworm) |
| gnome | gnome-shell | <= 3.9.92 | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
| gnome | gnome-shell | — | — |
CVSS provenance
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
osv4.6MEDIUM
vendor_debian4.6MEDIUM
vendor_redhat4.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
gnome-shell: run command dialog visible above screen locker
vendor_redhat·2013-11-14·CVSS 4.6
CVE-2013-7221 [MEDIUM] gnome-shell: run command dialog visible above screen locker
gnome-shell: run command dialog visible above screen locker
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
Package: gnome-shell (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2013-7221: gnome-shell - The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before ...
vendor_debian·2013·CVSS 4.6
CVE-2013-7221 [MEDIUM] CVE-2013-7221: gnome-shell - The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before ...
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
Scope: local
bookworm: resolved (fixed in 3.10.1-1)
bullseye: resolved (fixed in 3.10.1-1)
forky: resolved (fixed in 3.10.1-1)
sid: resolved (fixed in 3.10.1-1)
trixie: resolved (fixed in 3.10.1-1)
GHSA
GHSA-2fwf-gr55-x95r: The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3
ghsa_unreviewed·2022-05-17
CVE-2013-7221 [MEDIUM] GHSA-2fwf-gr55-x95r: The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
OSV
CVE-2013-7221: The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3
osv·2014-04-29·CVSS 4.6
CVE-2013-7221 [MEDIUM] CVE-2013-7221: The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2013/12/27/4http://www.openwall.com/lists/oss-security/2013/12/27/8https://bugzilla.gnome.org/show_bug.cgi?id=708313https://git.gnome.org/browse/gnome-shell/commit/js/ui/main.js?id=efdf1ff755943fba1f8a9aaeff77daa3ed338088http://www.openwall.com/lists/oss-security/2013/12/27/4http://www.openwall.com/lists/oss-security/2013/12/27/8https://bugzilla.gnome.org/show_bug.cgi?id=708313https://git.gnome.org/browse/gnome-shell/commit/js/ui/main.js?id=efdf1ff755943fba1f8a9aaeff77daa3ed338088
2014-04-29
Published