216 matches found
Updated lightdm packages fix security vulnerability
Updated lightdm corrects a possible denial of service attack CVE-2015-8316...
MGASA-2015-0461 Updated lightdm packages fix security vulnerability
Updated lightdm corrects a possible denial of service attack CVE-2015-8316...
PT-2017-7394
Name of the Vulnerable Software and Affected Versions LightDM versions 1.14.3, 1.16.x through 1.16.5 Description The issue is related to an array index error in LightDM when the XDMCP server is enabled, allowing remote attackers to cause a denial of service by crashing the process. This can be...
CVE-2012-1111
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
CVE-2012-1111
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
DEBIAN-CVE-2012-1111
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
Design/Logic Flaw
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
CVE-2012-1111
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
CVE-2012-1111
CVE-2012-1111 affects lightdm prior to 1.0.9. The issue is failure to properly close file descriptors before starting a child process, allowing local users to write to the lightdm log (and other unspecified impact). Remediation: upgrade to lightdm 1.0.9 or later (patches addressing this flaw). If...
CVE-2012-1111
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
CVE-2012-1111
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
CVE-2012-1111: Exposure of Sensitive Information to an Unauthorized Actor
lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...
PT-2014-2219
Name of the Vulnerable Software and Affected Versions lightdm versions prior to 1.0.9 Description The issue is related to the improper closure of file descriptors before opening a child process, allowing local users to potentially write to the lightdm log or have other unspecified impact...
openSUSE Security Update : lightdm (openSUSE-SU-2012:0354-1)
update to version 1.0.9 - stop file descriptors leaking into the session processes bnc745339, lp927060, CVE-2012-1111 - fix compilation against gthread - change session directory once user permissions are set so it works on NFS filesystems that don't allow root to access files - fix object...
openSUSE Security Update : lightdm-gtk-greeter (openSUSE-SU-2014:0071-1)
add lightdm-gtk-greeter-handle-invalid-user.patch in order to fix a NULL pointer dereference after authentication of an invalid username has failed bnc857303, CVE-2014-0979 - add lightdm-gtk-greeter-invalid-lastsession.patch fix segfault when lastsession is an invalid session lp1161883 - add...
openSUSE Security Update : lightdm (openSUSE-2011-12)
Vulnerabilities were discovered for the lightdm packages in openSUSE version 12.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-12. The text description of this plugin is C SU...
CVE-2012-0943
CVE-2012-0943 concerns debian/guest-account in LightDM (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu 11.10. Affected component: guest-account cleanup in LightDM; root cause described as a vulnerability allowing local users to delete arbitrary files via a space in the name...
PT-2014-2213
Name of the Vulnerable Software and Affected Versions Light Display Manager lightdm versions 1.0.x through 1.0.5 Light Display Manager lightdm versions 1.1.x through 1.1.6 Description The issue allows local users to delete arbitrary files via a space in the name of a file in /tmp. Recommendations...
CVE-2012-0943: Undefined Security Weakness
debian/guest-account in Light Display Manager lightdm 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and...
