CVE-2016-1000002
gdm3 3.14.2 and possibly later has an information leak before screen lock
2.4 Low
CVE-2016-1000002 is a low vulnerability (CVSS 2.4) in Debian Linux, published November 5, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. No source names a fixed version.
- Severity
- 2.4 LowCVSS 3.1, NVD
- Exploit chance
- 0.55%EPSS, 46th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
gdm3 3.14.2 and possibly later has an information leak before screen lock
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
0.55%Down 0.5 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdm3Debian:12 | All versions, plus listed versions 43.0-344.0-144.1-144.1-245.0.1-1 Show 32 moreShow less45.0.1-245.0.1-345~beta-146.0-146.0-246.2-146~rc-147.0-147.0-247.0-347.0-448.0-148.0-248.0-348~beta-149.0.1-149.1-149.1-249.1-349.1-449.1-549.1-649.2-149.2-249.2-349.2-450.0-150.1-150.1-250.2-150.3-151.0-1 | None known |
gdm3Debian:13 | All versions, plus listed versions 48.0-248.0-349.0.1-149.1-149.1-2 Show 14 moreShow less49.1-349.1-449.1-549.1-649.2-149.2-249.2-349.2-450.0-150.1-150.1-250.2-150.3-151.0-1 | None known |
gdm3Debian:14 | All versions, plus listed versions 48.0-248.0-349.0.1-149.1-149.1-2 Show 14 moreShow less49.1-349.1-449.1-549.1-649.2-149.2-249.2-349.2-450.0-150.1-150.1-250.2-150.3-151.0-1 | None known |
gdm3Ubuntu:16.04:LTS | All versions, plus listed versions 3.18.0-2ubuntu13.18.0-2ubuntu23.18.0-2ubuntu33.18.0-2ubuntu43.18.2-1ubuntu1 Show 5 moreShow less3.18.2-1ubuntu23.18.3-0ubuntu13.18.3-0ubuntu23.18.3-0ubuntu2.13.18.3-0ubuntu2.2 | None known |
gdm3Ubuntu:18.04:LTS | All versions, plus listed versions 3.26.1-3ubuntu23.26.1-3ubuntu33.26.2.1-0ubuntu13.26.2.1-2ubuntu13.26.2.1-2ubuntu2 Show 10 moreShow less3.27.90-0ubuntu13.27.92-0ubuntu13.28.0-0ubuntu13.28.2-0ubuntu1.23.28.2-0ubuntu1.33.28.2-0ubuntu1.43.28.3-0ubuntu18.04.13.28.3-0ubuntu18.04.33.28.3-0ubuntu18.04.43.28.3-0ubuntu18.04.6 | None known |
gdm3Ubuntu:20.04:LTS | All versions, plus listed versions 3.34.1-1ubuntu13.36.3-0ubuntu0.20.04.13.36.3-0ubuntu0.20.04.23.36.3-0ubuntu0.20.04.33.36.3-0ubuntu0.20.04.4 | None known |
gdm3Ubuntu:22.04:LTS | All versions, plus listed versions 41~rc-0ubuntu241.0-3ubuntu141.0-3ubuntu241.3-1ubuntu141.3-1ubuntu2 Show 10 moreShow less41.3-1ubuntu342.0-1ubuntu142.0-1ubuntu242.0-1ubuntu442.0-1ubuntu642.0-1ubuntu742.0-1ubuntu7.22.04.142.0-1ubuntu7.22.04.242.0-1ubuntu7.22.04.342.0-1ubuntu7.22.04.4 | None known |
gdm3Ubuntu:24.04:LTS | All versions, plus listed versions 45~beta-1ubuntu145.0.1-1ubuntu145.0.1-1ubuntu246~rc-1ubuntu246.0-2ubuntu1 Show 7 moreShow less46.2-1ubuntu1~24.04.146.2-1ubuntu1~24.04.346.2-1ubuntu1~24.04.446.2-1ubuntu1~24.04.546.2-1ubuntu1~24.04.646.2-1ubuntu1~24.04.746.2-1ubuntu1~24.04.9 | None known |
gdm3Ubuntu:25.10 | All versions, plus listed versions 48.0-1ubuntu149~alpha.0-0ubuntu149~alpha.1-0ubuntu149~alpha.1-0ubuntu249~beta-0ubuntu1 Show 8 moreShow less49~beta-0ubuntu249~beta-0ubuntu349~rc-0ubuntu149~rc-0ubuntu249.0.1-1ubuntu149.0.1-1ubuntu249.0.1-1ubuntu2.149.0.1-1ubuntu2.2 | None known |
gdm3Ubuntu:26.10 | All versions, plus listed versions 50.0-0ubuntu150.1-0ubuntu151~alpha-0ubuntu151~beta-0ubuntu151~rc-0ubuntu151.0-0ubuntu151.0-0ubuntu1.1 | None known |
gdm3Ubuntu:26.04:LTS | All versions, plus listed versions 49.0.1-1ubuntu249.2-1ubuntu349.2-1ubuntu450~beta-0ubuntu350~rc-0ubuntu150.0-0ubuntu150.1-0ubuntu0.1 | None known |
What each source reports
NVD Score used
gdm3 3.14.2 and possibly later has an information leak before screen lock
- Record
CVE-2016-1000002- CVSS 3.1
- 2.4 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
gdm3 3.14.2 and possibly later has an information leak before screen lock
- Record
CVE-2016-1000002- Updated
- 2026-11-02
EUVDEUVD-2016-1011No score
gdm3 3.14.2 and possibly later has an information leak before screen lock
- Record
EUVD-2016-1011- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fpm9-2p3f-w4mmNo score
gdm3 3.14.2 and possibly later has an information leak before screen lock
gdm3 3.14.2 and possibly later has an information leak before screen lock
- Record
GHSA-fpm9-2p3f-w4mm- Updated
- 2026-11-02
OSV
gdm3 3.14.2 and possibly later has an information leak before screen lock
- Record
CVE-2016-1000002- CVSS 3.1
- 2.4 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-1000002
gdm3 3.14.2 and possibly later has an information leak before screen lock
- Record
DEBIAN-CVE-2016-1000002- CVSS 3.1
- 2.4 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-1000002
gdm3 3.14.2 and possibly later has an information leak before screen lock
- Record
UBUNTU-CVE-2016-1000002- CVSS 3.1
- 2.4 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-06
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000002.json
security-tracker.debian.org/tracker/CVE-2016-1000002
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000002
bugzilla.suse.com/show_bug.cgi?id=CVE-2016-1000002
nvd.nist.gov/vuln/detail/CVE-2016-1000002
github.com/advisories/GHSA-fpm9-2p3f-w4mm
ubuntu.com/security/CVE-2016-1000002
cve.org/CVERecord?id=CVE-2016-1000002