CVE-2013-7273

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-29 · updated 2026-06-17

Description

GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name.

Affected products

Gnome Display Manager: through 3.4.1; 3.0.0, 3.0.2, 3.0.3, 3.0.4, 3.1.2, 3.1.90 (+9)

References

http://www.openwall.com/lists/oss-security/2014/01/07/10
http://www.openwall.com/lists/oss-security/2014/01/07/16
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683338
https://bugzilla.gnome.org/show_bug.cgi?id=704284
https://bugzilla.redhat.com/show_bug.cgi?id=1050745
http://www.openwall.com/lists/oss-security/2014/01/07/10
http://www.openwall.com/lists/oss-security/2014/01/07/16
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683338
https://bugzilla.gnome.org/show_bug.cgi?id=704284
https://bugzilla.redhat.com/show_bug.cgi?id=1050745

Get alerted when CVE-2013-7273 or the next vulnerability affects your stack