suse · CVE-2014-7300

Quick triage

Priority: medium Published: 2021-05-30 13:23:17 UTC Updated: 2026-04-18 18:34:42 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2014-7300 severity moderate: SUSE including 61 source package names (clutter-1.14.4-12.el7, clutter-devel-1.14.4-12.el7, …), 93 product×package rows across 36 product lines (SUSE Liberty Linux 7, SUSE Linux Enterprise Desktop 12, … (36 product lines)): Fixed 84, Known Not Affected 9.

Description:

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.

cvelogic Threat Intelligence