CVE-2014-7300: gnome gnome-shell Resource Management Errors

Vulnerability summary

CVE-2014-7300 is a high (CVSS 7.2) Resource Management Errors vulnerability in gnome gnome-shell. EPSS estimates a 0.47% chance of exploitation in the next 30 days, higher than 39.5% of scored vulnerabilities.

Timeline

1. 25-12-2014
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.

• CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.