CVE-2014-7300

GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.

• CWE-399

• http://openwall.com/lists/oss-security/2014/09/29/17Mailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0535.htmlThird Party Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=737456Issue Tracking, Vendor Advisory
• https://git.gnome.org/browse/gnome-shell/commit/?id=a72dca361080ffc9f45ff90188a7cf013c3c4013Issue Tracking, Patch
• https://git.gnome.org/browse/gnome-shell/commit/?id=f02b007337e61436aaa0e81a86ad707b6d277378Issue Tracking, Patch
• http://openwall.com/lists/oss-security/2014/09/29/17Mailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0535.htmlThird Party Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=737456Issue Tracking, Vendor Advisory
• https://git.gnome.org/browse/gnome-shell/commit/?id=a72dca361080ffc9f45ff90188a7cf013c3c4013Issue Tracking, Patch
• https://git.gnome.org/browse/gnome-shell/commit/?id=f02b007337e61436aaa0e81a86ad707b6d277378Issue Tracking, Patch

Published

Dec 25, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7294Open redirect vulnerability in the logon page in NYU OpenSSO…
• CVE-2014-7295The (1) Special:Preferences and (2) Special:UserLogin pages …
• CVE-2014-7296The default configuration in the accessibility engine in Spa…
• CVE-2014-7297Unspecified vulnerability in the folder framework in the Enf…
• CVE-2014-7298adsetgroups in Centrify Server Suite 2008 through 2014.1 and…
• CVE-2014-7299Unspecified vulnerability in administrative interfaces in Ar…
• CVE-2014-7301SGI Tempo, as used on SGI ICE-X systems, uses weak permissio…6.6
• CVE-2014-7302SGI Tempo, as used on SGI ICE-X systems, uses weak permissio…7.8
• CVE-2014-7303SGI Tempo, as used on SGI ICE-X systems, uses weak permissio…7.8
• CVE-2014-7307The ForoSocuellamos (aka com.forosocuellamos.tlcttbeukajwpeq…
• CVE-2014-7308Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7309The Where2Stop-Cardlocks-Free (aka appinventor.ai_kidatheart…