Lightdm Project Lightdm — known CVE vulnerabilities

Every CVE whose affected-product data names Lightdm Project Lightdm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2011-3349 — CVSS 7.8 (high): lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local…
• CVE-2017-7358 — CVSS 7.3 (high): In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path…
• CVE-2015-8316 — CVSS 5.9 (medium): Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote…
• CVE-2017-8900 — CVSS 4.6 (medium): LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor…