The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) via an empty username.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade lightdm-gtk-greeter | Jul 30, 2024 | Jan 23, 2014 |
| Suse | — | Upgrade lightdm-gtk-greeter-debugsourceUpgrade lightdm-gtk-greeter-debuginfoUpgrade lightdm-gtk-greeterUpgrade lightdm-gtk-greeter-langUpgrade lightdm-gtk-greeter-branding-upstream | Dec 18, 2015 | Jan 15, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub