{"id":"CVE-2014-7300","aliases":["DEBIAN-CVE-2014-7300","EUVD-2014-7171","GHSA-gg6w-rmxx-j7xr","MGASA-2014-0501","RHSA-2015:0535","SUSE-SU-2015:0515-1","UBUNTU-CVE-2014-7300","openSUSE-SU-2024:10441-1"],"status":"published","title":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the...","description":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00473,"percentile":0.41126,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2014-12-01T17:57:09Z","modified":"2026-10-23T15:47:29Z","fixes":[{"ecosystem":"Debian:12","package":"gnome-shell","fixed_in":["3.14.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnome-shell","fixed_in":["3.14.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnome-shell","fixed_in":["3.14.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"gnome-shell","fixed_in":["3.10.2.1-7.1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"gnome-settings-daemon","fixed_in":["3.10.2-2.1.mga4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"clutter-debuginfo","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"clutter-devel","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"clutter-doc","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"cogl-debuginfo","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"cogl-devel","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"cogl-doc","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnome-shell-browser-plugin","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnome-shell-debuginfo","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutter-debuginfo","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutter-devel","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"clutter","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"cogl","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnome-shell","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutter","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"clutter","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"clutter-debuginfo","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"clutter-devel","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"clutter-doc","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cogl","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cogl-debuginfo","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cogl-devel","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cogl-doc","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnome-shell","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnome-shell-browser-plugin","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnome-shell-debuginfo","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutter","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutter-debuginfo","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutter-devel","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"clutter-debuginfo","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"clutter-devel","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"clutter-doc","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"cogl-debuginfo","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"cogl-devel","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"cogl-doc","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnome-shell-browser-plugin","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnome-shell-debuginfo","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutter-debuginfo","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutter-devel","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"clutter","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"cogl","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnome-shell","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutter","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"clutter-debuginfo","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"clutter-devel","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"clutter-doc","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cogl-debuginfo","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cogl-devel","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cogl-doc","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnome-shell-browser-plugin","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnome-shell-debuginfo","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutter-debuginfo","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutter-devel","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"clutter","fixed_in":["0:1.14.4-12.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cogl","fixed_in":["0:1.14.0-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnome-shell","fixed_in":["0:3.8.4-45.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutter","fixed_in":["0:3.8.4-16.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"gnome-settings-daemon","fixed_in":["3.10.2-20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"gnome-settings-daemon","fixed_in":["3.10.2-20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"gnome-settings-daemon","fixed_in":["3.10.2-20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"gnome-settings-daemon","fixed_in":["3.10.2-20.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.1-1"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2.1-7.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"gnome-settings-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-2.1.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"clutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"clutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"clutter-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cogl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cogl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cogl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnome-shell-browser-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnome-shell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"cogl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"clutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"clutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"clutter-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cogl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cogl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cogl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"cogl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnome-shell-browser-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnome-shell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"clutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"clutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"clutter-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cogl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cogl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cogl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnome-shell-browser-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnome-shell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"cogl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"clutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"clutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"clutter-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cogl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cogl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cogl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnome-shell-browser-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnome-shell-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutter-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"clutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.4-12.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"cogl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.0-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnome-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-45.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mutter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-16.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"gnome-settings-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"gnome-settings-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"gnome-settings-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"gnome-settings-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-20.1"}]}]}],"products":[{"vendor":"gnome","product":"gnome-shell"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_hpc_node"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://git.gnome.org/browse/gnome-shell/commit/?id=a72dca361080ffc9f45ff90188a7cf013c3c4013","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0535.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://git.gnome.org/browse/gnome-shell/commit/?id=f02b007337e61436aaa0e81a86ad707b6d277378","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=737456","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","advisory","report"]},{"url":"http://openwall.com/lists/oss-security/2014/09/29/17","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7300","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gg6w-rmxx-j7xr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-7300","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0501.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14334","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-October/141115.html","tags":["web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-11/msg00005.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0535","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1108322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1126754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1137041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1147917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1149585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163474","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0535.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7300","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150515-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/900031","tags":["report"]},{"url":"https://bugzilla.suse.com/905158","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7300","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-7300","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-7300","description":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.","status":"published","published":"2014-12-25T21:00:00Z","modified":"2024-08-06T12:47:32.779Z","updated_at":"2026-11-02T14:33:46.955592Z"}],"euvd":[{"id":"EUVD-2014-7171","description":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.","status":"published","published":"2014-12-25T21:00:00Z","modified":"2024-08-06T12:47:32Z","updated_at":"2026-11-03T01:56:55.480046Z"}],"ghsa":[{"id":"GHSA-gg6w-rmxx-j7xr","title":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the...","description":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.","status":"published","published":"2022-05-17T03:49:35Z","modified":"2023-01-27T05:09:18Z","updated_at":"2026-11-02T14:43:22.211542Z"}],"nvd":[{"id":"CVE-2014-7300","description":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.","status":"published","published":"2014-12-25T21:59:02.937Z","modified":"2026-06-17T00:14:43.467Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"CVE-2014-7300","description":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.","status":"published","published":"2014-12-25T21:59:02Z","modified":"2026-04-16T06:17:54.582049156Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-7300","description":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.","status":"published","published":"2014-12-25T21:59:02.937Z","modified":"2026-10-23T15:47:29.648253184Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"MGASA-2014-0501","title":"Updated gnome-shell and gnome-settings-daemon packages fix security vulnerability","description":"The lock screen in gnome-shell does not disable taking screenshots via the\nPrint Screen key, and several consecutive screenshot requests can trigger an\nout-of-memory situation, causing the lock screen to be killed, thus allowing\nit to be bypassed (CVE-2014-7300).\n","status":"published","published":"2014-12-01T17:57:09Z","modified":"2026-04-16T06:23:51.273645128Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10441-1","title":"gnome-settings-daemon-3.22.1-1.1 on GA media","description":"These are all security issues fixed in the gnome-settings-daemon-3.22.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:34:06.378341Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2015:0535","title":"Red Hat Security Advisory: GNOME Shell security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:02:23Z","modified":"2026-06-28T10:13:13Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0515-1","title":"Security update for gnome-settings-daemon","description":"\ngnome-settings-daemon was updated to fix a bug and a security issue:\n\nSecurity issue fixed:\n- CVE-2014-7300: The lockscreen can be bypassed with the Print Screen button.\n\nBug fixed:\n- Do not hide the cursor while there was no mutter running (bsc#905158).\n","status":"published","published":"2015-02-12T07:58:57Z","modified":"2026-02-04T03:20:28.344486Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-7300","description":"GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.","status":"withdrawn","published":"2014-12-25T21:59:00Z","modified":"2025-07-16T07:32:11.845942Z","updated_at":"2026-11-02T15:54:09.378953Z"}]}}