USN-4614-1: GDM vulnerability

  • Thread starter Ubuntu security notices
  • Start date

Ubuntu security notices

Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user.

Continue reading...