In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or other impacts depending on the JavaScript code's behavior.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6963-1 advisory.

    It was discovered that GNOME Shell incorrectly opened the portal helper automatically when detecting a     captive network portal. A remote attacker could possibly use this issue to load arbitrary web pages     containing JavaScript, leading to resource consumption or other attacks.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9114 advisory.

    * gnome-shell: code execution in portal helper (CVE-2024-36472)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8692:07 advisory.

    * gnome-shell: code execution in portal helper (CVE-2024-36472)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2618-1 advisory.

    - CVE-2024-36472: Fixed portal helper automatically launched without user confirmation (bsc#1225567)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9114 advisory.

    GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other     objects. It provides core interface functions like switching windows, launching applications, and     notifications. It takes advantage of the capabilities of modern graphics hardware and introduces     innovative user interface concepts.

    Security Fix(es):

    * gnome-shell: code execution in portal helper (CVE-2024-36472)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0248 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-36472:
    In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation)     based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi     network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or     other impacts depending on the JavaScript code's behavior.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005908 advisory.

    In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation)     based on network responses provided by an adversary (e.g., an adversary who controls the local Wi-Fi     network), and subsequently loads untrusted JavaScript code, which may lead to resource consumption or     other impacts depending on the JavaScript code's behavior.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2576-1 advisory.

    - CVE-2024-36472: Fixed portal helper automatically launched without user confirmation (bsc#1225567)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:5298 advisory.

    GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other     objects. It provides core interface functions like switching windows, launching applications, and     notifications. It takes advantage of the capabilities of modern graphics hardware and introduces     innovative user interface concepts.

    Security Fix(es):

    * gnome-shell: code execution in portal helper (CVE-2024-36472)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9316:01 advisory.

    * gnome-shell: code execution in portal helper (CVE-2024-36472)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
198233	GNOME Shell <= 45.7 Code Execution in Portal Helper (CVE-2024-36472)	Nessus	Misc.	2024/5/31	2024/11/20	medium
205629	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : GNOME Shell vulnerability (USN-6963-1)	Nessus	Ubuntu Local Security Checks	2024/8/15	2024/11/20	medium
232912	RockyLinux 9 : gnome-shell and gnome-shell-extensions (RLSA-2024:9114)	Nessus	Rocky Linux Local Security Checks	2025/3/19	2025/3/19	medium
292183	MiracleLinux 8 : gnome-shell-3.32.2-56.el8_10.ML.1 (AXSA:2024-8692:07)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
204890	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gnome-shell (SUSE-SU-2024:2618-1)	Nessus	SuSE Local Security Checks	2024/7/31	2024/11/20	medium
210803	RHEL 9 : gnome-shell and gnome-shell-extensions (RHSA-2024:9114)	Nessus	Red Hat Local Security Checks	2024/11/12	2024/11/20	medium
236150	Alibaba Cloud Linux 3 : 0248: gnome-shell and gnome-shell-extensions (ALINUX3-SA-2024:0248)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	medium
301374	Unity Linux 20.1070a Security Update: gnome-shell (UTSA-2026-005908)	Nessus	Unity Linux Local Security Checks	2026/3/6	2026/3/6	medium
203001	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gnome-shell (SUSE-SU-2024:2576-1)	Nessus	SuSE Local Security Checks	2024/7/23	2024/7/26	medium
205501	RHEL 8 : gnome-shell (RHSA-2024:5298)	Nessus	Red Hat Local Security Checks	2024/8/14	2025/3/28	medium
293372	MiracleLinux 9 : gnome-shell-extensions-40.7-19.el9.ML.1, gnome-shell-40.10-21.el9.ML.1 (AXSA:2024-9316:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium