CVEvulnerability
CVE-2017-8900
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-05-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session.
Affected configurations
• lightdm project lightdm (<= 1.22.0)
References
- http://www.securityfocus.com/bid/98554 Third Party Advisory, VDB Entry
- https://launchpad.net/bugs/1663157 Issue Tracking, Patch, Vendor Advisory
- https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-8900.html Patch, Vendor Advisory
- https://www.ubuntu.com/usn/usn-3285-1/ Patch, Vendor Advisory
- http://www.securityfocus.com/bid/98554 Third Party Advisory, VDB Entry
- https://launchpad.net/bugs/1663157 Issue Tracking, Patch, Vendor Advisory
- https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-8900.html Patch, Vendor Advisory
- https://www.ubuntu.com/usn/usn-3285-1/ Patch, Vendor Advisory