Read the docs
TI-2012-01017 Aliases CVE-2012-1111GHSA-hg8g-8g53-j2c8

lightdm before 1.0.9 does not properly close file descriptors before opening a child…

Priority LOW 22CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact.

Why it matters now

EPSS 0.00469 40th percentileScored 2026-11-07
Public exploit Yes 4 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 42

CPEVersionsRoleVendor
cpe:2.3:a:robert_ancell:lightdm:*:*:*:*:*:*:*:*up to 1.0.8VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.0.1:*:*:*:*:*:*:*0.0.1VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.0.2:*:*:*:*:*:*:*0.0.2VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.0.3:*:*:*:*:*:*:*0.0.3VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.0.4:*:*:*:*:*:*:*0.0.4VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.1.0:*:*:*:*:*:*:*0.1.0VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.1.1:*:*:*:*:*:*:*0.1.1VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.1.2:*:*:*:*:*:*:*0.1.2VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.2.0:*:*:*:*:*:*:*0.2.0VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.2.1:*:*:*:*:*:*:*0.2.1VulnerableRobert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:*:*:*:*:*:*:*:* Versions up to 1.0.8 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.0.1:*:*:*:*:*:*:* Versions 0.0.1 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.0.2:*:*:*:*:*:*:* Versions 0.0.2 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.0.3:*:*:*:*:*:*:* Versions 0.0.3 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.0.4:*:*:*:*:*:*:* Versions 0.0.4 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.1.0:*:*:*:*:*:*:* Versions 0.1.0 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.1.1:*:*:*:*:*:*:* Versions 0.1.1 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.1.2:*:*:*:*:*:*:* Versions 0.1.2 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.2.0:*:*:*:*:*:*:* Versions 0.2.0 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.2.1:*:*:*:*:*:*:* Versions 0.2.1 Vulnerable ·Robert Ancell
Show 32 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:robert_ancell:lightdm:0.2.2:*:*:*:*:*:*:*0.2.2VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.2.3:*:*:*:*:*:*:*0.2.3VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.3.0:*:*:*:*:*:*:*0.3.0VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.3.1:*:*:*:*:*:*:*0.3.1VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.3.2:*:*:*:*:*:*:*0.3.2VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.3.3:*:*:*:*:*:*:*0.3.3VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.3.4:*:*:*:*:*:*:*0.3.4VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.3.5:*:*:*:*:*:*:*0.3.5VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.3.6:*:*:*:*:*:*:*0.3.6VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.4.0:*:*:*:*:*:*:*0.4.0VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.4.1:*:*:*:*:*:*:*0.4.1VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.4.2:*:*:*:*:*:*:*0.4.2VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.4.3:*:*:*:*:*:*:*0.4.3VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.4.4:*:*:*:*:*:*:*0.4.4VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.0:*:*:*:*:*:*:*0.9.0VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.1:*:*:*:*:*:*:*0.9.1VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.2:*:*:*:*:*:*:*0.9.2VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.3:*:*:*:*:*:*:*0.9.3VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.4:*:*:*:*:*:*:*0.9.4VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.5:*:*:*:*:*:*:*0.9.5VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.6:*:*:*:*:*:*:*0.9.6VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.7:*:*:*:*:*:*:*0.9.7VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:0.9.8:*:*:*:*:*:*:*0.9.8VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.6:*:*:*:*:*:*:*1.0.6VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.10:*:*:*:*:*:*:*1.0.10VulnerableRobert Ancell
cpe:2.3:a:robert_ancell:lightdm:1.0.11:*:*:*:*:*:*:*1.0.11VulnerableRobert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.2.2:*:*:*:*:*:*:* Versions 0.2.2 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.2.3:*:*:*:*:*:*:* Versions 0.2.3 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.3.0:*:*:*:*:*:*:* Versions 0.3.0 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.3.1:*:*:*:*:*:*:* Versions 0.3.1 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.3.2:*:*:*:*:*:*:* Versions 0.3.2 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.3.3:*:*:*:*:*:*:* Versions 0.3.3 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.3.4:*:*:*:*:*:*:* Versions 0.3.4 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.3.5:*:*:*:*:*:*:* Versions 0.3.5 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.3.6:*:*:*:*:*:*:* Versions 0.3.6 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.4.0:*:*:*:*:*:*:* Versions 0.4.0 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.4.1:*:*:*:*:*:*:* Versions 0.4.1 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.4.2:*:*:*:*:*:*:* Versions 0.4.2 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.4.3:*:*:*:*:*:*:* Versions 0.4.3 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.4.4:*:*:*:*:*:*:* Versions 0.4.4 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.0:*:*:*:*:*:*:* Versions 0.9.0 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.1:*:*:*:*:*:*:* Versions 0.9.1 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.2:*:*:*:*:*:*:* Versions 0.9.2 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.3:*:*:*:*:*:*:* Versions 0.9.3 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.4:*:*:*:*:*:*:* Versions 0.9.4 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.5:*:*:*:*:*:*:* Versions 0.9.5 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.6:*:*:*:*:*:*:* Versions 0.9.6 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.7:*:*:*:*:*:*:* Versions 0.9.7 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:0.9.8:*:*:*:*:*:*:* Versions 0.9.8 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·Robert Ancell
  • cpe:2.3:a:robert_ancell:lightdm:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·Robert Ancell

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-1111
  2. 2026-10-03 Alias added: GHSA-hg8g-8g53-j2c8

References

Exploit 4

Advisory 1

  • TI-2013-03909 LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to… CVSS 2.0LOW 3.3
  • TI-2012-00867 debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x… CVSS 2.0LOW 2.1
  • TI-2013-03794 Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x… CVSS 2.0LOW 2.1
  • TI-2011-03623 LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority. CVSS 2.0LOW 1.9
  • TI-2011-02783 dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read… CVSS 2.0LOW 1.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences