CVE-2014-7300
HighSummary
GNOME Shell 3.14.x before 3.14.1 does not limit the aggregate memory consumption of active PrtSc requests, allowing nearby attackers to execute arbitrary commands on an unattended workstation.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update GNOME Shell to version 3.14.1 or later to mitigate this vulnerability.
Other vulnerabilities in GNOME Shell
See all- CVE-2026-91786Medium
A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit this by providing oversized icon dimensions, leading to an out-of-bounds read. This can cause the GNOME Shell process to crash, disrupting the user's session, and potentially disclose sensitive information from adjacent memory.
- CVE-2017-8288High
Versions of gnome-shell from 3.22 to 3.24.1 mishandle extensions that fail to reload, which can lead to leaving extensions enabled on the lock screen. This allows bystanders to launch applications and view information from those extensions.
Original NVD description (English source)
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.