Medium
Security advisory
A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-3825
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 04:31 UTC · Revision 1
Source evidence
A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.
osv:CVE-2019-3825
Complete source record
{
"id": "7494c011849056a60a8b2b3a11628f70638502ede6a09410f4688a052596ad60",
"url": "https://osv.dev/vulnerability/CVE-2019-3825",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-3825",
"summary": "A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to expire, at which time they would gain access to the logged-in user's session.",
"evidence": "osv:CVE-2019-3825",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2019-3825",
"aliases": [
"CVE-2019-3825"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/gnome/gdm",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "35f8afc4f9cf146b6c10b324ae57978ba6a13ba0"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:gnome:gnome_display_manager:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "3.31.4"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"3.30.2",
"3.30.1",
"3.30.0",
"3.29.92",
"3.29.91",
"3.29.90",
"3.29.1",
"3.28.0",
"3.27.92",
"3.27.91",
"3.27.90",
"3.27.4",
"3.27.3",
"3.26.1",
"3.26.0",
"3.25.92",
"3.25.90",
"3.25.4.1",
"3.25.4",
"3.25.3",
"3.24.1",
"3.24.0",
"3.23.92",
"3.23.91.1",
"3.23.91",
"3.22.1",
"3.23.4",
"3.22.0",
"3.21.91",
"3.21.90",
"3.21.4",
"3.21.3",
"3.21.2",
"3.20.1",
"3.20.0",
"3.19.92",
"3.19.91",
"3.19.90",
"3.19.4.1",
"3.19.4",
"3.19.2",
"3.18.0",
"3.17.92",
"3.17.90",
"3.17.4",
"3.17.3.1",
"3.17.3",
"3.17.2",
"3.12.2",
"3.16.1.1",
"3.16.1",
"3.16.0.1",
"3.16.0",
"3.15.92",
"3.15.91.2",
"3.15.91.1",
"3.15.91",
"3.15.90.5",
"3.15.90.4",
"3.15.90.3",
"3.15.90.2",
"3.15.90.1",
"3.15.90",
"3.15.3.1",
"3.15.3",
"3.15.2",
"3.14.1",
"3.14.0",
"3.13.92",
"3.13.91",
"3.12.1",
"3.12.0",
"3.11.92.1",
"3.11.92",
"3.11.90",
"3.11.4",
"3.11.3",
"3.11.2",
"3.10.0.1",
"3.10.0",
"3.9.92",
"3.9.90",
"3.9.5",
"3.8.3",
"3.8.1.1",
"3.8.1",
"3.8.0",
"3.7.91",
"3.7.90",
"3.7.5",
"3.7.3.1",
"3.7.3",
"3.7.2",
"3.6.0",
"3.5.92.1",
"3.5.92",
"3.5.91",
"3.5.90",
"3.5.5",
"3.5.4.2",
"2.5.4.2",
"3.5.4.1",
"3.5.4",
"3.5.2",
"3.4.1",
"3.4.0.1",
"3.4.0",
"3.3.92.1",
"3.3.92",
"3.1.2",
"3.1.92",
"3.1.91",
"3.1.90",
"3.0.0",
"GDM_2_91_94",
"GDM_2_91_93",
"GDM_2_91_92",
"GDM_2_91_90",
"GDM_2_91_6",
"GDM_2_91_4",
"GDM_2_32_0",
"GDM_2_31_92",
"GDM_2_31_90",
"GDM_2_31_2",
"GDM_2_31_1",
"GDM_2_31_0",
"GDM_2_30_1",
"GDM_2_30_0",
"GDM_2_29_92",
"GDM_2_28_92",
"GDM_2_29_6",
"GDM_2_29_5",
"GDM_2_29_4",
"GDM_2_29_1",
"GDM_2_29_0",
"GDM_2_28_1",
"GDM_2_28_0",
"GDM_2_27_90",
"2.27.4",
"GDM_2_26_1",
"GDM_2_26_0",
"GDM_2_25_92",
"GDM_2_25_2",
"GDM_2_25_1",
"GDM_2_24_0",
"GDM_2_23_92",
"GDM_2_23_90",
"GDM_2_23_2",
"GDM_2_22_0",
"GDM_2_21_9",
"GDM_2_21_8",
"GDM_2_21_7",
"GDM_2_21_6",
"GDM_2_21_5",
"GDM_2_21_4",
"GDM_2_21_2",
"GDM_2_21_1",
"POST_SWITCH_TO_GOBJECT_BRANCH",
"GDM2_2_18_0",
"GDM2_2_17_8",
"GDM2_2_17_7",
"GDM2_2_17_6",
"GDM2_2_17_5",
"GDM2_2_17_4",
"GDM2_2_17_3",
"GDM2_2_17_2",
"GDM2_2_17_1",
"GDM2_2_17_0",
"GDM2_2_16_0",
"GDM2_2_15_10",
"GDM2_2_15_9",
"GDM2_2_15_8",
"GDM2_2_15_7",
"GDM2_2_15_6",
"GDM2_2_15_5",
"GDM2_2_15_4",
"GDM2_2_15_3",
"GDM2_2_15_2",
"GDM2_2_15_1",
"GDM2_2_15_0",
"GDM2_2_14_4",
"GDM2_2_14_3",
"GDM2_2_14_2",
"GDM2_2_14_1",
"GDM2_2_14_0",
"GDM2_2_13_0_10",
"GDM2_2_13_0_9",
"GDM2_2_13_0_8",
"GDM2_2_13_0_7",
"GDM2_2_13_0_6",
"GDM2_2_13_0_5",
"GDM2_2_13_0_4",
"GDM2_2_13_0_3",
"GDM2_2_13_0_2",
"GDM2_2_13_0_1",
"GDM2_2_13_0_0",
"gdm2",
"GDM2_2_8_0_1",
"GDM2_2_8_0_0",
"GDM2_2_6_0_8",
"GDM2_2_6_0_7",
"GDM2_2_6_0_6",
"GDM2_2_6_0_5",
"GDM2_2_6_0_4",
"GDM2_2_6_0_3",
"GDM2_2_6_0_2",
"GDM2_2_6_0_1",
"GDM2_2_6_0_0",
"GDM2_2_5_90_2",
"GDM2_2_5_90_1",
"GDM2_2_5_90_0",
"GDM2_2_4_4_5",
"GDM2_4_4_4",
"GDM2_2_4_4_3",
"GDM2_2_4_4_2",
"GDM2_2_4_4_1",
"GDM2_2_4_4_0",
"GDM2_2_4_2_102",
"GDM2_2_4_2_101",
"GDM2_2_4_2_100",
"GDM2_2_4_2_99",
"GDM2_2_4_2_98",
"GDM2_2_4_2_97",
"GDM2_2_4_2_96",
"GDM2_2_4_2_95",
"GDM2_2_4_1_3",
"GDM2_2_4_1_2",
"GDM2_2_4_1_1",
"GDM2_2_4_1_0",
"GDM2_2_4_0_11",
"GDM2_2_4_0_9",
"GDM2_2_4_0_8",
"GDM2_2_4_0_7",
"GDM2_2_4_0_6",
"GDM2_2_4_0_5",
"GDM2_2_4_0_4",
"GDM2_2_4_0_3",
"GDM2_2_4_0_2",
"GDM_2_4_0_1",
"GDM_2_4_0_0",
"GDM_2_3_90_6",
"GDM_2_3_90_5",
"GDM_2_3_90_4",
"GDM_2_3_90_3",
"GDM_2_3_90_2",
"GDM_2_3_90_1",
"GDM_2_2_ANCHOR",
"GDM_2_2_5_1",
"GDM_2_2_4_3",
"GDM_2_2_4_2",
"GDM_2_2_3_2",
"GDM_2_2_3",
"GDM2_2_2_2_1",
"GDM2_2_2_1",
"GNOME_PRINT_0_24",
"STABLE",
"GDM_2_0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3825.json"
}
},
{
"ranges": [
{
"repo": "https://gitlab.gnome.org/gnome/gdm",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "35f8afc4f9cf146b6c10b324ae57978ba6a13ba0"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:gnome:gnome_display_manager:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "3.31.4"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"3.30.2",
"3.30.1",
"3.30.0",
"3.29.92",
"3.29.91",
"3.29.90",
"3.29.1",
"3.28.0",
"3.27.92",
"3.27.91",
"3.27.90",
"3.27.4",
"3.27.3",
"3.26.1",
"3.26.0",
"3.25.92",
"3.25.90",
"3.25.4.1",
"3.25.4",
"3.25.3",
"3.24.1",
"3.24.0",
"3.23.92",
"3.23.91.1",
"3.23.91",
"3.22.1",
"3.23.4",
"3.22.0",
"3.21.91",
"3.21.90",
"3.21.4",
"3.21.3",
"3.21.2",
"3.20.1",
"3.20.0",
"3.19.92",
"3.19.91",
"3.19.90",
"3.19.4.1",
"3.19.4",
"3.19.2",
"3.18.0",
"3.17.92",
"3.17.90",
"3.17.4",
"3.17.3.1",
"3.17.3",
"3.17.2",
"3.12.2",
"3.16.1.1",
"3.16.1",
"3.16.0.1",
"3.16.0",
"3.15.92",
"3.15.91.2",
"3.15.91.1",
"3.15.91",
"3.15.90.5",
"3.15.90.4",
"3.15.90.3",
"3.15.90.2",
"3.15.90.1",
"3.15.90",
"3.15.3.1",
"3.15.3",
"3.15.2",
"3.14.1",
"3.14.0",
"3.13.92",
"3.13.91",
"3.12.1",
"3.12.0",
"3.11.92.1",
"3.11.92",
"3.11.90",
"3.11.4",
"3.11.3",
"3.11.2",
"3.10.0.1",
"3.10.0",
"3.9.92",
"3.9.90",
"3.9.5",
"3.8.3",
"3.8.1.1",
"3.8.1",
"3.8.0",
"3.7.91",
"3.7.90",
"3.7.5",
"3.7.3.1",
"3.7.3",
"3.7.2",
"3.6.0",
"3.5.92.1",
"3.5.92",
"3.5.91",
"3.5.90",
"3.5.5",
"3.5.4.2",
"2.5.4.2",
"3.5.4.1",
"3.5.4",
"3.5.2",
"3.4.1",
"3.4.0.1",
"3.4.0",
"3.3.92.1",
"3.3.92",
"3.1.2",
"3.1.92",
"3.1.91",
"3.1.90",
"3.0.0",
"GDM_2_91_94",
"GDM_2_91_93",
"GDM_2_91_92",
"GDM_2_91_90",
"GDM_2_91_6",
"GDM_2_91_4",
"GDM_2_32_0",
"GDM_2_31_92",
"GDM_2_31_90",
"GDM_2_31_2",
"GDM_2_31_1",
"GDM_2_31_0",
"GDM_2_30_1",
"GDM_2_30_0",
"GDM_2_29_92",
"GDM_2_28_92",
"GDM_2_29_6",
"GDM_2_29_5",
"GDM_2_29_4",
"GDM_2_29_1",
"GDM_2_29_0",
"GDM_2_28_1",
"GDM_2_28_0",
"GDM_2_27_90",
"2.27.4",
"GDM_2_26_1",
"GDM_2_26_0",
"GDM_2_25_92",
"GDM_2_25_2",
"GDM_2_25_1",
"GDM_2_24_0",
"GDM_2_23_92",
"GDM_2_23_90",
"GDM_2_23_2",
"GDM_2_22_0",
"GDM_2_21_9",
"GDM_2_21_8",
"GDM_2_21_7",
"GDM_2_21_6",
"GDM_2_21_5",
"GDM_2_21_4",
"GDM_2_21_2",
"GDM_2_21_1",
"POST_SWITCH_TO_GOBJECT_BRANCH",
"GDM2_2_18_0",
"GDM2_2_17_8",
"GDM2_2_17_7",
"GDM2_2_17_6",
"GDM2_2_17_5",
"GDM2_2_17_4",
"GDM2_2_17_3",
"GDM2_2_17_2",
"GDM2_2_17_1",
"GDM2_2_17_0",
"GDM2_2_16_0",
"GDM2_2_15_10",
"GDM2_2_15_9",
"GDM2_2_15_8",
"GDM2_2_15_7",
"GDM2_2_15_6",
"GDM2_2_15_5",
"GDM2_2_15_4",
"GDM2_2_15_3",
"GDM2_2_15_2",
"GDM2_2_15_1",
"GDM2_2_15_0",
"GDM2_2_14_4",
"GDM2_2_14_3",
"GDM2_2_14_2",
"GDM2_2_14_1",
"GDM2_2_14_0",
"GDM2_2_13_0_10",
"GDM2_2_13_0_9",
"GDM2_2_13_0_8",
"GDM2_2_13_0_7",
"GDM2_2_13_0_6",
"GDM2_2_13_0_5",
"GDM2_2_13_0_4",
"GDM2_2_13_0_3",
"GDM2_2_13_0_2",
"GDM2_2_13_0_1",
"GDM2_2_13_0_0",
"gdm2",
"GDM2_2_8_0_1",
"GDM2_2_8_0_0",
"GDM2_2_6_0_8",
"GDM2_2_6_0_7",
"GDM2_2_6_0_6",
"GDM2_2_6_0_5",
"GDM2_2_6_0_4",
"GDM2_2_6_0_3",
"GDM2_2_6_0_2",
"GDM2_2_6_0_1",
"GDM2_2_6_0_0",
"GDM2_2_5_90_2",
"GDM2_2_5_90_1",
"GDM2_2_5_90_0",
"GDM2_2_4_4_5",
"GDM2_4_4_4",
"GDM2_2_4_4_3",
"GDM2_2_4_4_2",
"GDM2_2_4_4_1",
"GDM2_2_4_4_0",
"GDM2_2_4_2_102",
"GDM2_2_4_2_101",
"GDM2_2_4_2_100",
"GDM2_2_4_2_99",
"GDM2_2_4_2_98",
"GDM2_2_4_2_97",
"GDM2_2_4_2_96",
"GDM2_2_4_2_95",
"GDM2_2_4_1_3",
"GDM2_2_4_1_2",
"GDM2_2_4_1_1",
"GDM2_2_4_1_0",
"GDM2_2_4_0_11",
"GDM2_2_4_0_9",
"GDM2_2_4_0_8",
"GDM2_2_4_0_7",
"GDM2_2_4_0_6",
"GDM2_2_4_0_5",
"GDM2_2_4_0_4",
"GDM2_2_4_0_3",
"GDM2_2_4_0_2",
"GDM_2_4_0_1",
"GDM_2_4_0_0",
"GDM_2_3_90_6",
"GDM_2_3_90_5",
"GDM_2_3_90_4",
"GDM_2_3_90_3",
"GDM_2_3_90_2",
"GDM_2_3_90_1",
"GDM_2_2_ANCHOR",
"GDM_2_2_5_1",
"GDM_2_2_4_3",
"GDM_2_2_4_2",
"GDM_2_2_3_2",
"GDM_2_2_3",
"GDM2_2_2_2_1",
"GDM2_2_2_1",
"GNOME_PRINT_0_24",
"STABLE",
"GDM_2_0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3825.json"
}
}
],
"modified": "2026-10-24T10:30:19.434331600Z",
"provider": "osv",
"references": [
"https://usn.ubuntu.com/3892-1/",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3825"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "18.10"
},
{
"last_affected": "18.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-3825",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 430021,
"published_at": "2019-02-06T20:29:00.447+00:00"
}