VIR Vulnerability Intelligence Relay

CVE-2013-7273

low
Published 2014-04-29 · Modified 2026-05-06
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
2.1

Description

GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

OS impact
debian Debian Fixed 5 releases
VersionStatusFixed in
trixie Fixed 3.8.3-1
sid Fixed 3.8.3-1
forky Fixed 3.8.3-1
bullseye Fixed 3.8.3-1
bookworm Fixed 3.8.3-1

Application impact
VendorProductVersionsFixed
gnomegnome_display_manager{"endIncluding":"3.4.1"}
gnomegnome_display_manager3.0.0
gnomegnome_display_manager3.0.2
gnomegnome_display_manager3.0.3
gnomegnome_display_manager3.0.4
gnomegnome_display_manager3.1.2
gnomegnome_display_manager3.1.90
gnomegnome_display_manager3.1.91
gnomegnome_display_manager3.1.92
gnomegnome_display_manager3.2.0
gnomegnome_display_manager3.2.1
gnomegnome_display_manager3.2.1.1
gnomegnome_display_manager3.3.92
gnomegnome_display_manager3.3.92.1
gnomegnome_display_manager3.4.0
gnomegnome_display_manager3.4.0.1

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.