CVE-2014-7300
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the...
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
Exploit likelihood
What each source reports
NVD Score used
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
- Record
CVE-2014-7300- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
- Record
CVE-2014-7300- Updated
- 2026-11-02
EUVDEUVD-2014-7171 No score
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
- Record
EUVD-2014-7171- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gg6w-rmxx-j7xr No score
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the...
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
- Record
GHSA-gg6w-rmxx-j7xr- Updated
- 2026-11-02
OSV No score
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
- Record
CVE-2014-7300- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-7300 No score
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
- Record
DEBIAN-CVE-2014-7300- Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2014-0501 No score
Updated gnome-shell and gnome-settings-daemon packages fix security vulnerability
The lock screen in gnome-shell does not disable taking screenshots via the Print Screen key, and several consecutive screenshot requests can trigger an out-of-memory situation, causing the lock screen to be killed, thus allowing it to be bypassed (CVE-2014-7300).
- Record
MGASA-2014-0501- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10441-1 No score
gnome-settings-daemon-3.22.1-1.1 on GA media
These are all security issues fixed in the gnome-settings-daemon-3.22.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10441-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0515-1 No score
Security update for gnome-settings-daemon
gnome-settings-daemon was updated to fix a bug and a security issue:
Security issue fixed:
- CVE-2014-7300: The lockscreen can be bypassed with the Print Screen button.
Bug fixed:
- Do not hide the cursor while there was no mutter running (bsc#905158).
- Record
SUSE-SU-2015:0515-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-7300 No score
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
- Record
UBUNTU-CVE-2014-7300- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnome-shellDebian:12 |
before 3.14.1-1 | 3.14.1-1 |
gnome-shellDebian:13 |
before 3.14.1-1 | 3.14.1-1 |
gnome-shellDebian:14 |
before 3.14.1-1 | 3.14.1-1 |
gnome-shellMageia:4 |
before 3.10.2.1-7.1.mga4 | 3.10.2.1-7.1.mga4 |
gnome-settings-daemonMageia:4 |
before 3.10.2-2.1.mga4 | 3.10.2-2.1.mga4 |
clutter-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-develRed Hat:enterprise_linux:7::client |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-docRed Hat:enterprise_linux:7::client |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
cogl-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
cogl-develRed Hat:enterprise_linux:7::client |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
Show 55 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cogl-docRed Hat:enterprise_linux:7::client |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
gnome-shell-browser-pluginRed Hat:enterprise_linux:7::client |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
gnome-shell-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
mutter-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
mutter-develRed Hat:enterprise_linux:7::client |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
clutterRed Hat:enterprise_linux:7::client |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
coglRed Hat:enterprise_linux:7::client |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
gnome-shellRed Hat:enterprise_linux:7::client |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
mutterRed Hat:enterprise_linux:7::client |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
clutterRed Hat:enterprise_linux:7::computenode |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-develRed Hat:enterprise_linux:7::computenode |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-docRed Hat:enterprise_linux:7::computenode |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
coglRed Hat:enterprise_linux:7::computenode |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
cogl-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
cogl-develRed Hat:enterprise_linux:7::computenode |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
cogl-docRed Hat:enterprise_linux:7::computenode |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
gnome-shellRed Hat:enterprise_linux:7::computenode |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
gnome-shell-browser-pluginRed Hat:enterprise_linux:7::computenode |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
gnome-shell-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
mutterRed Hat:enterprise_linux:7::computenode |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
mutter-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
mutter-develRed Hat:enterprise_linux:7::computenode |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
clutter-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-develRed Hat:enterprise_linux:7::server |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-docRed Hat:enterprise_linux:7::server |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
cogl-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
cogl-develRed Hat:enterprise_linux:7::server |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
cogl-docRed Hat:enterprise_linux:7::server |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
gnome-shell-browser-pluginRed Hat:enterprise_linux:7::server |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
gnome-shell-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
mutter-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
mutter-develRed Hat:enterprise_linux:7::server |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
clutterRed Hat:enterprise_linux:7::server |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
coglRed Hat:enterprise_linux:7::server |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
gnome-shellRed Hat:enterprise_linux:7::server |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
mutterRed Hat:enterprise_linux:7::server |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
clutter-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-develRed Hat:enterprise_linux:7::workstation |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
clutter-docRed Hat:enterprise_linux:7::workstation |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
cogl-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
cogl-develRed Hat:enterprise_linux:7::workstation |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
cogl-docRed Hat:enterprise_linux:7::workstation |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
gnome-shell-browser-pluginRed Hat:enterprise_linux:7::workstation |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
gnome-shell-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
mutter-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
mutter-develRed Hat:enterprise_linux:7::workstation |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
clutterRed Hat:enterprise_linux:7::workstation |
before 0:1.14.4-12.el7 | 0:1.14.4-12.el7 |
coglRed Hat:enterprise_linux:7::workstation |
before 0:1.14.0-6.el7 | 0:1.14.0-6.el7 |
gnome-shellRed Hat:enterprise_linux:7::workstation |
before 0:3.8.4-45.el7 | 0:3.8.4-45.el7 |
mutterRed Hat:enterprise_linux:7::workstation |
before 0:3.8.4-16.el7 | 0:3.8.4-16.el7 |
gnome-settings-daemonSUSE:Linux Enterprise Desktop 12 |
before 3.10.2-20.1 | 3.10.2-20.1 |
gnome-settings-daemonSUSE:Linux Enterprise Software Development Kit 12 |
before 3.10.2-20.1 | 3.10.2-20.1 |
gnome-settings-daemonSUSE:Linux Enterprise Server 12 |
before 3.10.2-20.1 | 3.10.2-20.1 |
gnome-settings-daemonSUSE:Linux Enterprise Server for SAP Applications 12 |
before 3.10.2-20.1 | 3.10.2-20.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-7300 is a high vulnerability (CVSS 7.2) in Gnome Gnome-shell, published December 1, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. Fixed in gnome-shell 3.14.1-1.
References
git.gnome.org/browse/gnome-shell/commit?id=a72dca361080ffc9f45ff90188a7cf013c3c4013
rhn.redhat.com/errata/RHSA-2015-0535.html
bugzilla.gnome.org/show_bug.cgi?id=737456
openwall.com/lists/oss-security/2014/09/29/17
nvd.nist.gov/vuln/detail/CVE-2014-7300
Show 29 moreShow less
github.com/advisories/GHSA-gg6w-rmxx-j7xr
security-tracker.debian.org/tracker/CVE-2014-7300
advisories.mageia.org/MGASA-2014-0501.html
bugs.mageia.org/show_bug.cgi?id=14334
lists.fedoraproject.org/pipermail/package-announce/2014-October/141115.html
lists.opensuse.org/opensuse-updates/2014-11/msg00005.html
access.redhat.com/errata/RHSA-2015:0535
bugzilla.redhat.com/show_bug.cgi?id=1043571
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0535.json
cve.org/CVERecord?id=CVE-2014-7300
suse.com/support/update/announcement/2015/suse-su-20150515-1
bugzilla.suse.com/900031
ubuntu.com/security/CVE-2014-7300