Candidate: CVE-2017-8288
PublicDate: 2017-04-27 00:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8288
Description:
 gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload,
 which can lead to leaving extensions enabled in the lock screen. With these
 extensions, a bystander could launch applications (but not interact with
 them), see information from the extensions (e.g., what applications you
 have opened or what music you were playing), or even execute arbitrary
 commands. It all depends on what extensions a user has enabled. The problem
 is caused by lack of exception handling in js/ui/extensionSystem.js.
Ubuntu-Description:
Notes:
Bugs:
 https://bugs.kali.org/view.php?id=2513
 https://bugzilla.gnome.org/show_bug.cgi?id=781728
 https://github.com/EasyScreenCast/EasyScreenCast/issues/46
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H [8.1 HIGH]

Patches_gnome-shell:
 upstream: https://github.com/GNOME/gnome-shell/commit/ff425d1db7082e2755d2a405af53861552acf2a1
upstream_gnome-shell: needs-triage
precise_gnome-shell: ignored (reached end-of-life)
precise/esm_gnome-shell: DNE (precise was needed)
trusty_gnome-shell: ignored (reached end-of-life)
trusty/esm_gnome-shell: DNE (trusty was needed)
vivid/stable-phone-overlay_gnome-shell: DNE
vivid/ubuntu-core_gnome-shell: DNE
xenial_gnome-shell: ignored (end of standard support, was needed)
yakkety_gnome-shell: ignored (reached end-of-life)
zesty_gnome-shell: not-affected (3.24.2-0ubuntu0.1)
artful_gnome-shell: not-affected (3.24.2-0ubuntu6)
bionic_gnome-shell: not-affected (3.24.2-0ubuntu6)
cosmic_gnome-shell: not-affected (3.24.2-0ubuntu6)
disco_gnome-shell: not-affected (3.24.2-0ubuntu6)
eoan_gnome-shell: not-affected (3.24.2-0ubuntu6)
focal_gnome-shell: not-affected (3.24.2-0ubuntu6)
groovy_gnome-shell: not-affected (3.24.2-0ubuntu6)
hirsute_gnome-shell: not-affected (3.24.2-0ubuntu6)
impish_gnome-shell: not-affected (3.24.2-0ubuntu6)
jammy_gnome-shell: not-affected (3.24.2-0ubuntu6)
devel_gnome-shell: not-affected (3.24.2-0ubuntu6)