High severity8.1NVD Advisory· Published Apr 27, 2017· Updated Jun 17, 2026
CVE-2017-8288
CVE-2017-8288
Description
gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications (but not interact with them), see information from the extensions (e.g., what applications you have opened or what music you were playing), or even execute arbitrary commands. It all depends on what extensions a user has enabled. The problem is caused by lack of exception handling in js/ui/extensionSystem.js.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24cpe:2.3:a:gnome:gnome-shell:3.22.0:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:gnome:gnome-shell:3.22.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.22.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.22.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.22.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.23.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.23.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.23.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.23.90:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.23.91:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.23.92:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.24.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnome:gnome-shell:3.24.1:*:*:*:*:*:*:*
- osv-coords12 versionspkg:rpm/opensuse/gnome-shell&distro=openSUSE%20Tumbleweedpkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP2pkg:rpm/suse/gnome-shell&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3
< 40.5-1.1+ 11 more
- (no CPE)range: < 40.5-1.1
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
- (no CPE)range: < 3.20.4-77.7.5
Patches
Vulnerability mechanics
References
5- github.com/GNOME/gnome-shell/commit/ff425d1db7082e2755d2a405af53861552acf2a1nvdIssue TrackingPatchThird Party Advisory
- www.securityfocus.com/bid/98070nvdThird Party AdvisoryVDB Entry
- github.com/EasyScreenCast/EasyScreenCast/issues/46nvdThird Party Advisory
- bugs.kali.org/view.phpnvdIssue Tracking
- bugzilla.gnome.org/show_bug.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.