Gnome Keyring

gnome-keyring

Vendor: Gnome • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-6111 2Debian Gnome 2Debian Linux Gnome Keyring Nov 21, 2024 Dec 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function
CVE-2018-20781 3Canonical GnomeOracle 3Gnome Keyring Ubuntu LinuxZfs Storage Appliance Kit Nov 21, 2024 Feb 12, 2019 N/A· v4 7.8 HIGH· v3 2.1 LOW· v2 In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext.
CVE-2018-19358 1Gnome 1Gnome Keyring Nov 21, 2024 Nov 18, 2018 N/A· v4 7.8 HIGH· v3 2.1 LOW· v2 GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, a similar issue to CVE-2008-7320. One perspective is that th...Show more GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, a similar issue to CVE-2008-7320. One perspective is that this occurs because available D-Bus protection mechanisms (involving the busconfig and policy XML elements) are not used. NOTE: the vendor disputes this because, according to the security model, untrusted applications must not be allowed to access the user's session bus socket.Show less
CVE-2012-3466 1Gnome 1Gnome Keyring Apr 29, 2026 Oct 22, 2012 N/A· v4 N/A· v3 4.4 MEDIUM· v2 GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via un...Show more GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors.Show less