Lightdm Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Lightdm Project records in CISA KEV

No Lightdm Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lightdm 4 records LOW

Records

4 records in Lightdm · all components

TI-2017-05013 CVE-2017-7358 · GHSA-487j-vfqw-h49x

In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows…

LOW 37

In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.02669 Published 2017-04-05 No fix listed CWE-22

TI-2011-02959 CVE-2011-3349 · GHSA-m2g2-7fc9-g232

Improper privilege management in lightdm

LOW 34

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00363 Published 2019-11-19 Fixed in 0.9.6 CWE-269

TI-2015-06845 CVE-2015-8316 · GHSA-4p4w-jwhc-qwjq

Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6…

LOW 30

Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMCP request packet with…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01748 Published 2017-09-06 No fix listed CWE-129

TI-2017-06397 CVE-2017-8900 · GHSA-2r8v-9m34-p378

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically…

LOW 22

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a gu…

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.00418 Published 2017-05-12 No fix listed

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0