CVE-2013-7273 Denial of service in n/a

What is CVE-2013-7273?

CVE-2013-7273 is a low-severity denial of service vulnerability in n/a, published on 29 Apr 2014. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name.

Which versions are affected by CVE-2013-7273?

It affects 1 product.

Products include Gnome Gnome Display Manager.

How do I fix CVE-2013-7273?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2013-7273 being exploited?

There is no known exploitation of CVE-2013-7273 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-14424 Use after free in n/a High 7.8
• CVE-2020-16125 gdm3 would start gnome-initial-setup if it cannot contact accountservice High 7.2
• CVE-2013-4169 Path traversal in n/a Medium 6.9
• CVE-2020-27837 Race condition in gdm Medium 6.4
• CVE-2017-12164 Auth bypass in gdm Medium 4.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2013-7273, GHSA-2w7j-hchq-jpj6.