{"schemaVersion":3,"id":"CVE-2018-14424","aliases":["SUSE-SU-2018:2527-1","SUSE-SU-2018:2771-1","UBUNTU-CVE-2018-14424","USN-3737-1","DEBIAN-CVE-2018-14424","DLA-1494-1","DSA-4270-1"],"status":"published","duplicateOf":null,"title":null,"description":"The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.","dates":{"published":"2018-08-14T16:00:00.000Z","modified":"2024-08-05T09:29:51.661Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.6,"severity":"medium","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true}]},"epss":{"probability":0.00536,"percentile":0.44102,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.0040000000000000105,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00532},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00543,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00536,"percentile":0.44102}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00543,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00532,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00536,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00536,"percentile":0.44102}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"debian","product":"gdm3","name":"gdm3","label":"gdm3","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/gdm3","purlType":"deb","versions":[{"text":"< 3.28.2-4","noFixRecorded":false,"fixedIn":null},{"text":"< 3.22.3-3+deb9u2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.14.1-7+deb8u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.28.2-4 | < 3.22.3-3+deb9u2 | < 3.14.1-7+deb8u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"gdm3","name":"gdm3","label":"gdm3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/gdm3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 3.28.2-0ubuntu1.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 3.28.2-0ubuntu1.4","eol":null,"hubHref":null},{"vendor":"gnome","product":"gnome_display_manager","name":"gnome display manager","label":"gnome_display_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 3.29.1","eol":null,"hubHref":"/vendor/gnome/gnome_display_manager"},{"vendor":"suse","product":"gdm&distro=SUSE Linux Enterprise Desktop 12 SP3","name":"gdm","label":"gdm&distro=SUSE Linux Enterprise Desktop 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gdm&distro=SUSE Linux Enterprise Desktop 12 SP3","purlType":"rpm","versions":[{"text":"< 3.10.0.1-54.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10.0.1-54.6.3","eol":null,"hubHref":null},{"vendor":"suse","product":"gdm&distro=SUSE Linux Enterprise Module for Desktop Applications 15","name":"gdm","label":"gdm&distro=SUSE Linux Enterprise Module for Desktop Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gdm&distro=SUSE Linux Enterprise Module for Desktop Applications 15","purlType":"rpm","versions":[{"text":"< 3.26.2.1-13.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.26.2.1-13.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"gdm&distro=SUSE Linux Enterprise Server 12 SP3","name":"gdm","label":"gdm&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gdm&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 3.10.0.1-54.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10.0.1-54.6.3","eol":null,"hubHref":null},{"vendor":"suse","product":"gdm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"gdm","label":"gdm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gdm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 3.10.0.1-54.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10.0.1-54.6.3","eol":null,"hubHref":null},{"vendor":"suse","product":"gdm&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","name":"gdm","label":"gdm&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/gdm&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","purlType":"rpm","versions":[{"text":"< 3.10.0.1-54.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.10.0.1-54.6.3","eol":null,"hubHref":null}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00003.html","label":"lists.debian.org/debian-lts-announce/2018/09/msg00003.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://gitlab.gnome.org/GNOME/gdm/issues/401","label":"gitlab.gnome.org/GNOME/gdm/issues/401","hostname":"gitlab.gnome.org","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3737-1/","label":"usn.ubuntu.com/3737-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4270","label":"www.debian.org/security/2018/dsa-4270","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/105179","label":"www.securityfocus.com/bid/105179","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182527-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20182527-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1103737","label":"bugzilla.suse.com/1103737","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14424","label":"www.suse.com/security/cve/CVE-2018-14424","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182771-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20182771-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1081947","label":"bugzilla.suse.com/1081947","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1103093","label":"bugzilla.suse.com/1103093","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-14424","label":"ubuntu.com/security/CVE-2018-14424","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3737-1","label":"ubuntu.com/security/notices/USN-3737-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14424","label":"www.cve.org/CVERecord?id=CVE-2018-14424","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14424","label":"security-tracker.debian.org/tracker/CVE-2018-14424","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10780-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10780-1"]},"timeline":[{"kind":"published","date":"2018-08-14T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T09:29:51.661Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:13:00.140Z","stale":false,"partial":false}}