Skip to content
Fencer Vulns
medium 6.3

CVE-2019-3825 json

A vulnerability was discovered in gdm before 3.31.4.

published 2019-02-06 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-13448

cvss
6.3
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 43%
public exploits
0
none known

Summary

A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.

Patch / fix

  • gnome gnome_display_manager 3.31.4
  • gdm3 Debian 14, Debian 13, Debian 12 3.30.2-3

debian advisories DEBIAN-CVE-2019-3825

  • gdm3 Ubuntu 18.04 LTS 3.28.3-0ubuntu18.04.4

ubuntu advisories UBUNTU-CVE-2019-3825

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • gdm RHEL 8 1:3.28.3-29.el8
  • gjs RHEL 8 1.56.2-4.el8
  • gtk3 RHEL 8 3.22.30-5.el8
  • gvfs RHEL 8 1.36.2-8.el8
  • vala RHEL 8 0.40.19-1.el8
  • baobab RHEL 8 3.28.0-4.el8
  • evince RHEL 8 3.28.4-4.el8
  • LibRaw RHEL 8 0.19.5-1.el8

red hat advisories RHSA-2020:1766

  • gdm SLE Module for Desktop Applications 15 3.26.2.1-13.19.2

suse advisories SUSE-SU-2019:0527-1

  • gdm openSUSE Tumbleweed 3.38.2-2.7

opensuse advisories openSUSE-SU-2024:10780-1

  • vala AlmaLinux 8 0.40.19-1.el8
  • baobab AlmaLinux 8 3.28.0-4.el8
  • clutter AlmaLinux 8 1.26.2-8.el8
  • mozjs52 AlmaLinux 8 52.9.0-2.el8.alma
  • mozjs52 AlmaLinux 8 52.9.0-2.el8
  • mozjs60 AlmaLinux 8 60.9.0-4.el8.alma
  • mozjs60 AlmaLinux 8 60.9.0-4.el8
  • gnome-menus AlmaLinux 8 3.13.3-11.el8

almalinux advisories ALSA-2020:1766

  • baobab Rocky Linux 8 3.28.0-4.el8
  • clutter Rocky Linux 8 1.26.2-8.el8
  • mozjs52 Rocky Linux 8 52.9.0-2.el8
  • mozjs60 Rocky Linux 8 60.9.0-4.el8
  • gnome-menus Rocky Linux 8 3.13.3-11.el8
  • gnome-tweaks Rocky Linux 8 3.28.1-7.el8

rocky linux advisories RLSA-2020:1766

  • gdm Arch Linux 3.30.3-1

arch linux advisories AVG-879

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2019-3825 updated cvss 6.3

gdm: lock screen bypass when timed login is enabled

  • Red Hat Enterprise Linux 6 gdm, gdm-libs, gdm-plugin-smartcard, gdm-plugin-fingerprint, gdm-user-switch-applet
    affected: workaround, no fix planned “Ensure timed login is not enabled in gdm configuration, by checking the output of: ~~~ grep TimedLogin /etc/gdm/custom.conf ~~~”
  • Red Hat CodeReady Linux Builder (v. 8) gvfs 1.36.2-8.el8, vala 0.40.19-1.el8, LibRaw 0.19.5-1.el8, nautilus 3.28.1-12.el8, libvncserver 0.9.11-14.el8 Red Hat Enterprise Linux AppStream (v. 8) gjs 1.56.2-4.el8, gdm 3.28.3-29.el8, gvfs 1.36.2-8.el8, gtk3 3.22.30-5.el8, baobab 3.28.0-4.el8, evince 3.28.4-4.el8, +41 more Red Hat Enterprise Linux BaseOS (v. 8) libxslt 1.1.32-4.el8, mozjs52 52.9.0-2.el8, mozjs60 60.9.0-4.el8, gsettings-desktop-schemas 3.32.0-4.el8
    fixed: vendor fix “Ensure timed login is not enabled in gdm configuration, by checking the output of: ~~~ grep TimedLogin /etc/gdm/custom.conf ~~~” RHSA-2020:1766
  • Red Hat Enterprise Linux 7 gdm
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.51% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3825 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.0 6.3 CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 3.0 6.4 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

  • The Gnome Projectr gdm

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.