Every CVE Search/ Get API key

CVE-2020-16125

gdm3 would start gnome-initial-setup if it cannot contact accountservice

7.2 HighPublic exploitFix available

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Attack profile

How easy it is to exploit

Attack vector
Physical
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.11%Up 0.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.2

gdm3 would start gnome-initial-setup if it cannot contact accountservice

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Record
CVE-2020-16125
CVSS 3.1
7.2 HighCVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Weakness
CWE-754
Updated
2026-11-02
EUVDEUVD-2020-8091 7.2

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Record
EUVD-2020-8091
CVSS 3.1
7.2 HighCVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-pc8h-hq5p-vf38 No score

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the...

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Record
GHSA-pc8h-hq5p-vf38
Weakness
CWE-754
Updated
2026-11-02
NVD 7.2

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Record
CVE-2020-16125
CVSS 3.1
7.2 HighCVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1
6.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-754
Updated
2026-11-02
OSV 6.8

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Record
CVE-2020-16125
CVSS 3.1
6.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-16125 6.8

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Record
DEBIAN-CVE-2020-16125
CVSS 3.1
6.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 12 moreShow less
OSVRHSA-2021:1586 8.8

Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

Record
RHSA-2021:1586
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:1586 8.8

Moderate: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of Rocky Linux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

  • webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

  • webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

  • glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

Record
RLSA-2021:1586
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-16125 7.2

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could be be chained with an additional issue that could allow a local user to create a new privileged account.

Record
UBUNTU-CVE-2020-16125
CVSS 3.1
7.2 HighCVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1
6.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2021:1586 No score

Moderate: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

  • webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

  • webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

  • webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

  • glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2021:1586
Updated
2026-11-02
OSVMGASA-2021-0003 No score

Updated gdm packages fix a security vulnerability

Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user (CVE-2020-16125).

Record
MGASA-2021-0003
Updated
2026-11-02
OSVopenSUSE-SU-2020:1961-1 No score

Security update for gdm

This update for gdm fixes the following issues:

  • Exit with failure if loading existing users fails (bsc#1178150 CVE-2020-16125).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2020:1961-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2264-1 No score

Security update for gdm

This update for gdm fixes the following issues:

  • CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:2264-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11547-1 No score

gdm-41.0-1.1 on GA media

These are all security issues fixed in the gdm-41.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11547-1
Updated
2026-11-02
OSVSUSE-SU-2020:3333-1 No score

Security update for gdm

This update for gdm fixes the following issues:

  • Exit with failure if loading existing users fails (bsc#1178150 CVE-2020-16125).
Record
SUSE-SU-2020:3333-1
Updated
2026-11-02
OSVSUSE-SU-2020:3614-1 No score

Security update for gdm

This update for gdm fixes the following issues:

  • CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).
Record
SUSE-SU-2020:3614-1
Updated
2026-11-02
OSVSUSE-SU-2020:3799-1 No score

Security update for gdm

This update for gdm fixes the following issues:

  • CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).
Record
SUSE-SU-2020:3799-1
Updated
2026-11-02
OSVUSN-4614-1 No score

gdm3 vulnerability

Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool and create a privileged user.

Record
USN-4614-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
OpenEXR-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.0-12.el8
2.2.0-12.el8
OpenEXR-libs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.0-12.el8
2.2.0-12.el8
accountsservice-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.6.55-1.el8
0.6.55-1.el8
atkmm
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.2-7.el8
2.24.2-7.el8
atkmm-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.2-7.el8
2.24.2-7.el8
atkmm-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.2-7.el8
2.24.2-7.el8
cairomm
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.12.0-8.el8
1.12.0-8.el8
cairomm-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.12.0-8.el8
1.12.0-8.el8
cairomm-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.12.0-8.el8
1.12.0-8.el8
chrome-gnome-shell
AlmaLinux:8
From an advisory covering 12 CVEs
 before 10.1-7.el8
10.1-7.el8
Show 170 moreShow less
Affected packages
PackageAffectedFixed
dleyna-core
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.6.0-3.el8
0.6.0-3.el8
dleyna-server
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.6.0-3.el8
0.6.0-3.el8
enchant2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.3-3.el8
2.2.3-3.el8
enchant2-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.2.3-3.el8
2.2.3-3.el8
gamin
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.1.10-32.el8
0.1.10-32.el8
gamin-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.1.10-32.el8
0.1.10-32.el8
geoclue2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.5.5-2.el8
2.5.5-2.el8
geoclue2-demos
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.5.5-2.el8
2.5.5-2.el8
geoclue2-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.5.5-2.el8
2.5.5-2.el8
geoclue2-libs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.5.5-2.el8
2.5.5-2.el8
geocode-glib
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.0-3.el8
3.26.0-3.el8
geocode-glib-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.26.0-3.el8
3.26.0-3.el8
gjs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.56.2-5.el8
1.56.2-5.el8
gjs-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.56.2-5.el8
1.56.2-5.el8
glib2-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.4-9.el8
2.56.4-9.el8
glib2-static
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.4-9.el8
2.56.4-9.el8
glibmm24
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.0-2.el8
2.56.0-2.el8
glibmm24-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.0-2.el8
2.56.0-2.el8
glibmm24-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.56.0-2.el8
2.56.0-2.el8
gnome-boxes
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.36.5-8.el8
3.36.5-8.el8
gnome-photos
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-4.el8
3.28.1-4.el8
gnome-photos-tests
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-4.el8
3.28.1-4.el8
gnome-terminal
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.3-3.el8
3.28.3-3.el8
gnome-terminal-nautilus
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.3-3.el8
3.28.3-3.el8
gtk-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.28-3.el8
1.28-3.el8
gtk2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtk2-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtk2-devel-docs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtk2-immodule-xim
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtk2-immodules
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.32-5.el8
2.24.32-5.el8
gtkmm24
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.5-6.el8
2.24.5-6.el8
gtkmm24-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.5-6.el8
2.24.5-6.el8
gtkmm24-docs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.24.5-6.el8
2.24.5-6.el8
gtkmm30
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.22.2-3.el8
3.22.2-3.el8
gtkmm30-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.22.2-3.el8
3.22.2-3.el8
gtkmm30-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.22.2-3.el8
3.22.2-3.el8
gvfs
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-afc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-afp
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-archive
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-client
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-fuse
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-goa
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-gphoto2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-mtp
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
gvfs-smb
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.36.2-11.el8
1.36.2-11.el8
libdazzle
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.5-2.el8
3.28.5-2.el8
libdazzle-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.5-2.el8
3.28.5-2.el8
libepubgen
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.1.0-3.el8
0.1.0-3.el8
libepubgen-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.1.0-3.el8
0.1.0-3.el8
libsass
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.4.5-6.el8
3.4.5-6.el8
libsass-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.4.5-6.el8
3.4.5-6.el8
libsigc++20
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.10.0-6.el8
2.10.0-6.el8
libsigc++20-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.10.0-6.el8
2.10.0-6.el8
libsigc++20-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.10.0-6.el8
2.10.0-6.el8
libvisual
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1:0.4.0-25.el8
1:0.4.0-25.el8
libvisual-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1:0.4.0-25.el8
1:0.4.0-25.el8
mutter-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.32.2-57.el8
3.32.2-57.el8
nautilus
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-15.el8
3.28.1-15.el8
nautilus-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-15.el8
3.28.1-15.el8
nautilus-extensions
AlmaLinux:8
From an advisory covering 12 CVEs
 before 3.28.1-15.el8
3.28.1-15.el8
pangomm
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.40.1-6.el8
2.40.1-6.el8
pangomm-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.40.1-6.el8
2.40.1-6.el8
pangomm-doc
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.40.1-6.el8
2.40.1-6.el8
soundtouch
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.0.0-3.el8
2.0.0-3.el8
soundtouch-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 2.0.0-3.el8
2.0.0-3.el8
vala
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.40.19-2.el8
0.40.19-2.el8
vala-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 0.40.19-2.el8
0.40.19-2.el8
woff2
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.0.2-5.el8
1.0.2-5.el8
woff2-devel
AlmaLinux:8
From an advisory covering 12 CVEs
 before 1.0.2-5.el8
1.0.2-5.el8
gdm3
Debian:12
 before 3.38.2-1
3.38.2-1
gdm3
Debian:13
 before 3.38.2-1
3.38.2-1
gdm3
Debian:14
 before 3.38.2-1
3.38.2-1
gdm3
Debian:9
 before 3.22.3-3+deb9u3, plus listed versions
3.22.3-33.22.3-3+deb9u13.22.3-3+deb9u2
3.22.3-3+deb9u3
gdm
Mageia:7
 before 3.32.0-1.1.mga7
3.32.0-1.1.mga7
glib2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-devel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-fam
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-fam-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-tests
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-tests-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-devel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-doc
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-fam-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-static
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
glib2-tests-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 12 CVEs
 before 0:2.56.4-9.el8
0:2.56.4-9.el8
webkit2gtk3
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-jsc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-jsc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-jsc-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
webkit2gtk3-jsc-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
gdm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 1:3.28.3-39.el8
1:3.28.3-39.el8
gdm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 1:3.28.3-39.el8
1:3.28.3-39.el8
gdm-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 12 CVEs
 before 1:3.28.3-39.el8
1:3.28.3-39.el8
cairomm
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.12.0-8.el8
0:1.12.0-8.el8
accountsservice
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.6.55-1.el8
0:0.6.55-1.el8
atkmm
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.24.2-7.el8
0:2.24.2-7.el8
chrome-gnome-shell
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:10.1-7.el8
0:10.1-7.el8
dleyna-core
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.6.0-3.el8
0:0.6.0-3.el8
dleyna-server
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.6.0-3.el8
0:0.6.0-3.el8
enchant2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.2.3-3.el8
0:2.2.3-3.el8
gamin
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.1.10-32.el8
0:0.1.10-32.el8
gdm
Rocky Linux:8
From an advisory covering 12 CVEs
 before 1:3.28.3-39.el8
1:3.28.3-39.el8
geoclue2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.5.5-2.el8
0:2.5.5-2.el8
geocode-glib
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.26.0-3.el8
0:3.26.0-3.el8
gjs
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.56.2-5.el8
0:1.56.2-5.el8
glibmm24
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.56.0-2.el8
0:2.56.0-2.el8
gnome-boxes
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.36.5-8.el8
0:3.36.5-8.el8
gnome-boxes
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.36.5-8.el8.rocky.0.1
0:3.36.5-8.el8.rocky.0.1
gnome-control-center
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.2-27.el8
0:3.28.2-27.el8
gnome-online-accounts
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.2-2.el8
0:3.28.2-2.el8
gnome-photos
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.1-4.el8
0:3.28.1-4.el8
gnome-settings-daemon
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.32.0-14.el8
0:3.32.0-14.el8
gnome-shell
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.32.2-30.el8
0:3.32.2-30.el8
gnome-software
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.36.1-5.el8
0:3.36.1-5.el8
gnome-terminal
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.3-3.el8
0:3.28.3-3.el8
gtk2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.24.32-5.el8
0:2.24.32-5.el8
gtk-doc
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.28-3.el8
0:1.28-3.el8
gtkmm24
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.24.5-6.el8
0:2.24.5-6.el8
gtkmm30
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.22.2-3.el8
0:3.22.2-3.el8
gvfs
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.36.2-11.el8
0:1.36.2-11.el8
libdazzle
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.5-2.el8
0:3.28.5-2.el8
libepubgen
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.1.0-3.el8
0:0.1.0-3.el8
libsass
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.4.5-6.el8
0:3.4.5-6.el8
libsigc++20
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.10.0-6.el8
0:2.10.0-6.el8
libvisual
Rocky Linux:8
From an advisory covering 12 CVEs
 before 1:0.4.0-25.el8
1:0.4.0-25.el8
mutter
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.32.2-57.el8
0:3.32.2-57.el8
nautilus
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:3.28.1-15.el8
0:3.28.1-15.el8
OpenEXR
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.2.0-12.el8
0:2.2.0-12.el8
pangomm
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.40.1-6.el8
0:2.40.1-6.el8
soundtouch
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.0.0-3.el8
0:2.0.0-3.el8
vala
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:0.40.19-2.el8
0:0.40.19-2.el8
webkit2gtk3
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:2.30.4-1.el8
0:2.30.4-1.el8
woff2
Rocky Linux:8
From an advisory covering 12 CVEs
 before 0:1.0.2-5.el8
0:1.0.2-5.el8
gdm
SUSE:Linux Enterprise Module for Desktop Applications 15 SP2
 before 3.34.1-8.9.1
3.34.1-8.9.1
gdm
SUSE:HPE Helion OpenStack 8
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:OpenStack Cloud 7
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:OpenStack Cloud 8
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:OpenStack Cloud 9
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:OpenStack Cloud Crowbar 8
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:OpenStack Cloud Crowbar 9
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server 12 SP5
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Enterprise Storage 5
 before 3.10.0.1-54.17.2
3.10.0.1-54.17.2
gdm
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
 before 3.26.2.1-13.39.2
3.26.2.1-13.39.2
gdm3
Ubuntu:16.04:LTS
 All versions, plus listed versions
3.18.0-2ubuntu13.18.0-2ubuntu23.18.0-2ubuntu33.18.0-2ubuntu43.18.2-1ubuntu1
Show 5 moreShow less
3.18.2-1ubuntu23.18.3-0ubuntu13.18.3-0ubuntu23.18.3-0ubuntu2.13.18.3-0ubuntu2.2
 None known
gdm3
Ubuntu:18.04:LTS
 before 3.28.3-0ubuntu18.04.6, plus listed versions
3.26.1-3ubuntu23.26.1-3ubuntu33.26.2.1-0ubuntu13.26.2.1-2ubuntu13.26.2.1-2ubuntu2
Show 9 moreShow less
3.27.90-0ubuntu13.27.92-0ubuntu13.28.0-0ubuntu13.28.2-0ubuntu1.23.28.2-0ubuntu1.33.28.2-0ubuntu1.43.28.3-0ubuntu18.04.13.28.3-0ubuntu18.04.33.28.3-0ubuntu18.04.4
3.28.3-0ubuntu18.04.6
gdm3
Ubuntu:20.04:LTS
 before 3.36.3-0ubuntu0.20.04.2, plus listed versions
3.34.1-1ubuntu13.36.3-0ubuntu0.20.04.1
3.36.3-0ubuntu0.20.04.2
gdm
openSUSE:Leap 15.2
 before 3.34.1-lp152.6.9.1
3.34.1-lp152.6.9.1
gdm
openSUSE:Leap 15.1
 before 3.26.2.1-lp151.16.10.1
3.26.2.1-lp151.16.10.1
gdm
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 41.0-1.1
41.0-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubza970120604/CVE-2020-16125-Reproduction2023-08-03

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-16125 is a high vulnerability (CVSS 7.2) in Gnome Gdm3, published November 3, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 66th percentile. Fixed in gdm3 3.38.2-1.

References

Show 118 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open