PatchTheCVElightdm vulnerabilities and fixes
Recent CVEs affecting lightdm, with upgrade or downgrade steps. 4 tracked.
lightdm has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2019-11-19. Highest priority: CVE-2017-7358 (score 57/100).
- CVE-2017-8900 MEDIUM 4.6 UPGRADE LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers t
- CVE-2017-7358 HIGH 7.3 UPGRADE MITIGATE In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to ow
- CVE-2015-8316 MEDIUM 5.9 DOWNGRADE Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is
- CVE-2011-3349 HIGH 7.8 UPGRADE lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user c
FAQ
How do I fix lightdm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lightdm being exploited right now?
None of the tracked lightdm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lightdm CVE should I patch first?
CVE-2017-7358 currently ranks highest (57/100): In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to ow.