CVE-2020-28049

CVE-2020-28049 affects SDDM prior to 0.19.0. A race during Xauthority file creation allows a local unprivileged user to connect to the X server for a brief window, exposing X display contents and potentially keystrokes or clipboard data. Root cause: race condition in Xauthority handling when star...

CVE-2014-7271

CVE-2014-7271 affects Simple Desktop Display Manager (SDDM). It describes an authentication flaw where versions prior to 0.10.0 allow local users to log in as the user "sddm" without authentication. Impact is local access and credential-free logins for that account. Mitigation: upgrade to SDDM 0....

CVE-2015-0856

CVE-2015-0856 affects sddm’s greeter: in versions prior to 0.13.0, the Greeter.cpp path does not disable the KDE crash handler, enabling local users to escalate privileges by crashing the greeter under certain themes (notably plasma-workspace breeze). The impact is local elevation to partial conf...

CVE-2014-7272

CVE-2014-7272 affects Simple Desktop Display Manager (SDDM) prior to 0.10.0. The vulnerability arises when code running as root writes in a user’s home directory and a race condition in the ~/.Xauthority chown case can be exploited by a user who created links in advance. This can allow local user...

CVE-2018-14345

SDDM vulnerability CVE-2018-14345 affects versions up to 0.17.0 where, when ReuseSession=true, the password is not checked for users with an existing session. Any user with access to the system D-Bus could unlock a graphical session. Root cause identified in daemon/Display.cpp and helper/backend/...