CVE-2013-7221
EPSS 0.07%
Description
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.
How to fix CVE-2013-7221
To remediate CVE-2013-7221, upgrade the affected package to a fixed version below.
- Debian/gnome-shell—upgrade to 3.10.1-1 or later
Is CVE-2013-7221 being exploited?
Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 3.10.1-1