Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gdm:2.4.1.3:*:*:*:*:*:*:*

part: a version: 2.4.1.3 update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductGdm (4c33b3e3-bdfe-5b63-8eb7-aedcd4cf047b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gnome/gdm purl2cpe 2026-06-01 10:17:24.566747
pkg:gitlab/gnome/gdm purl2cpe 2026-06-01 10:17:24.566749
pkg:gnome/gdm purl2cpe 2026-06-01 10:17:24.566750

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0794 vulnerable 2026-06-08 04:47:22.557941 Details available
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results.
Published: 2003-10-21T04:00:00.000Z
Updated: 2024-08-08T02:05:12.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0793 vulnerable 2026-06-08 04:47:22.555990 Details available
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption).
Published: 2003-10-21T04:00:00.000Z
Updated: 2024-08-08T02:05:12.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0549 vulnerable 2026-06-08 04:47:21.804924 Details available
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name.
Published: 2003-08-22T04:00:00.000Z
Updated: 2024-08-08T01:58:10.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0548 vulnerable 2026-06-08 04:47:21.797132 Details available
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549.
Published: 2003-08-22T04:00:00.000Z
Updated: 2024-08-08T01:58:10.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0547 vulnerable 2026-06-08 04:47:21.791834 Details available
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
Published: 2003-08-22T04:00:00.000Z
Updated: 2024-08-08T01:58:11.017Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.