CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus...
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
- Record
CVE-2018-14424- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
- Record
CVE-2018-14424- Updated
- 2026-11-02
EUVDEUVD-2018-6341 No score
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
- Record
EUVD-2018-6341- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c4j5-hwcp-h2qq
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus...
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
- Record
GHSA-c4j5-hwcp-h2qq- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSV
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
- Record
CVE-2018-14424- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
- Record
DEBIAN-CVE-2018-14424- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2018-14424
The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
- Record
UBUNTU-CVE-2018-14424- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10780-1 No score
gdm-3.38.2-2.7 on GA media
These are all security issues fixed in the gdm-3.38.2-2.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10780-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:2527-1 No score
Security update for gdm
This update for gdm fixes the following security issue:
- CVE-2018-14424: The daemon in GDM did not properly unexport display objects from its D-Bus interface when they are destroyed, which allowed a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution (bsc#1103737).
- Record
SUSE-SU-2018:2527-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:2771-1 No score
Security update for gdm
This update for gdm provides the following fixes:
This security issue was fixed:
- CVE-2018-14424: The daemon in GDM did not properly unexport display objects from its D-Bus interface when they are destroyed, which allowed a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution (bsc#1103737)
These non-security issues were fixed:
- Enable pam_keyinit module (bsc#1081947)
- Fix a build race in SLE (bsc#1103093)
- Record
SUSE-SU-2018:2771-1- Updated
- 2026-11-02
OSVUSN-3737-1 No score
gdm3 vulnerability
A use-after-free was discovered in GDM. A local user could exploit this to cause a denial of service, or potentially execute arbitrary code as the administrator.
- Record
USN-3737-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdm3Debian:12 |
before 3.28.2-4 | 3.28.2-4 |
gdm3Debian:13 |
before 3.28.2-4 | 3.28.2-4 |
gdm3Debian:14 |
before 3.28.2-4 | 3.28.2-4 |
gdm3Debian:8 |
before 3.14.1-7+deb8u1, plus listed versions 3.14.1-7 |
3.14.1-7+deb8u1 |
gdm3Debian:9 |
before 3.22.3-3+deb9u2, plus listed versions 3.22.3-33.22.3-3+deb9u1 |
3.22.3-3+deb9u2 |
gdmSUSE:Linux Enterprise Desktop 12 SP3 |
before 3.10.0.1-54.6.3 | 3.10.0.1-54.6.3 |
gdmSUSE:Linux Enterprise Software Development Kit 12 SP3 |
before 3.10.0.1-54.6.3 | 3.10.0.1-54.6.3 |
gdmSUSE:Linux Enterprise Server 12 SP3 |
before 3.10.0.1-54.6.3 | 3.10.0.1-54.6.3 |
gdmSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 3.10.0.1-54.6.3 | 3.10.0.1-54.6.3 |
gdmSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 3.26.2.1-13.9.1 | 3.26.2.1-13.9.1 |
gdm3Ubuntu:16.04:LTS |
All versions, plus listed versions 3.18.0-2ubuntu13.18.0-2ubuntu23.18.0-2ubuntu33.18.0-2ubuntu43.18.2-1ubuntu1 Show 5 moreShow less3.18.2-1ubuntu23.18.3-0ubuntu13.18.3-0ubuntu23.18.3-0ubuntu2.13.18.3-0ubuntu2.2 |
None known |
gdm3Ubuntu:18.04:LTS |
before 3.28.2-0ubuntu1.4, plus listed versions 3.26.1-3ubuntu23.26.1-3ubuntu33.26.2.1-0ubuntu13.26.2.1-2ubuntu13.26.2.1-2ubuntu2 Show 5 moreShow less3.27.90-0ubuntu13.27.92-0ubuntu13.28.0-0ubuntu13.28.2-0ubuntu1.23.28.2-0ubuntu1.3 |
3.28.2-0ubuntu1.4 |
gdmopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 3.38.2-2.7 | 3.38.2-2.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-14424 is a high vulnerability (CVSS 7.8) in Gnome Display Manager, published August 13, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. Fixed in gdm3 3.28.2-4.
References
lists.debian.org/debian-lts-announce/2018/09/msg00003.html
gitlab.gnome.org/GNOME/gdm/issues/401
usn.ubuntu.com/3737-1
debian.org/security/2018/dsa-4270
securityfocus.com/bid/105179
nvd.nist.gov/vuln/detail/CVE-2018-14424
Show 13 moreShow less
github.com/advisories/GHSA-c4j5-hwcp-h2qq
security-tracker.debian.org/tracker/CVE-2018-14424
suse.com/support/update/announcement/2018/suse-su-20182527-1
bugzilla.suse.com/1103737
ubuntu.com/security/CVE-2018-14424
cve.org/CVERecord?id=CVE-2018-14424