Gnome Session
Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:gnome-session:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Gnome Session (5e09587a-31fb-5263-b93d-fad5c39639c5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/gnome-session |
purl2cpe | 2026-06-01 10:17:23.068046 |
pkg:deb/ubuntu/gnome-session |
purl2cpe | 2026-06-01 10:17:23.068048 |
pkg:github/gnome/gnome-session |
purl2cpe | 2026-06-01 10:17:23.068051 |
pkg:rpm/centos/gnome-session |
purl2cpe | 2026-06-01 10:17:23.068054 |
pkg:rpm/fedora/gnome-session |
purl2cpe | 2026-06-01 10:17:23.068056 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-11171 |
vulnerable | 2026-06-08 05:08:36.955831 |
Details available
Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data (an invalid magic cookie). Each failed authentication attempt will leak a file descriptor in gnome-session. When the maximum number of file descriptors is exhausted in the gnome-session process, it will enter an infinite loop trying to communicate without success, consuming 100% of the CPU. The graphical session associated with the gnome-session process will stop working correctly, because communication with gnome-session is no longer possible.
Published: 2017-07-11T20:00:00.000Z
Updated: 2024-09-17T03:34:04.882Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.