lightdm project lightdm vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x prior to 1.16.6 when the XDMCP server is enabled allows remote malicious users to cause a denial of service (process crash) via an XDMCP request packet with no address.

Lightdm Project Lightdm 1.16.4 Lightdm Project Lightdm 1.14.3 Lightdm Project Lightdm 1.16.3 Lightdm Project Lightdm 1.16.2 Lightdm Project Lightdm 1.16.1 Lightdm Project Lightdm 1.16

2.1

CVSSv2

The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter prior to 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) ...

Opensuse Opensuse 12.2 Opensuse Opensuse 13.1 Opensuse Opensuse 12.3 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.5.2 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.5.1 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.1.3 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.1.2 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.3.0 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.1.6 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.6.1 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.6.0 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.1.5 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.1.4 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.5.0 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.3.1 Lightdm Gtk\\+ Greeter Project Lightdm Gtk\\+ Greeter 1.1.1

7.2

CVSSv2

lightdm prior to 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation.

Lightdm Project Lightdm

6.9

CVSSv2

In LightDM up to and including 1.22.0, a directory traversal issue in debian/guest-account.sh allows local malicious users to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.

Lightdm Project Lightdm Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 16.04

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook