Lucene search

[email protected]CVE-2015-8316

HistorySep 06, 2017 - 9:29 p.m.

CVE-2015-8316

2017-09-0621:29:01

CWE-129

[email protected]

web.nvd.nist.gov

cve-2015-8316

lightdm

array index error

xdmcp

denial of service

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMCP request packet with no address.

Affected configurations

NVD

Node

lightdm_projectlightdmMatch1.14.3

lightdm_projectlightdmMatch1.16

lightdm_projectlightdmMatch1.16.1

lightdm_projectlightdmMatch1.16.2

lightdm_projectlightdmMatch1.16.3

lightdm_projectlightdmMatch1.16.4

CPENameOperatorVersion
lightdm_project:lightdmlightdm project lightdmeq1.14.3
lightdm_project:lightdmlightdm project lightdmeq1.16
lightdm_project:lightdmlightdm project lightdmeq1.16.1
lightdm_project:lightdmlightdm project lightdmeq1.16.2
lightdm_project:lightdmlightdm project lightdmeq1.16.3
lightdm_project:lightdmlightdm project lightdmeq1.16.4

CPE	Name	Operator	Version
lightdm_project:lightdm	lightdm project lightdm	eq	1.14.3
lightdm_project:lightdm	lightdm project lightdm	eq	1.16
lightdm_project:lightdm	lightdm project lightdm	eq	1.16.1
lightdm_project:lightdm	lightdm project lightdm	eq	1.16.2
lightdm_project:lightdm	lightdm project lightdm	eq	1.16.3
lightdm_project:lightdm	lightdm project lightdm	eq	1.16.4

References

www.openwall.com/lists/oss-security/2015/11/22/1

bugs.launchpad.net/lightdm/+bug/1516831

bugzilla.redhat.com/show_bug.cgi?id=1284574

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

Related for CVE-2015-8316

ubuntucve1 mageia1 debiancve1 prion1 cvelist1 openvas1 nvd1