CVE-2015-0856 daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated b...
MediumCVSS 4.6
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/sddm(Debian:12) | < 0.12.0-5 | 0.12.0-5 |
| debian/sddm(Debian:13) | < 0.12.0-5 | 0.12.0-5 |
| debian/sddm(Debian:14) | < 0.12.0-5 | 0.12.0-5 |
| fedoraproject fedora | = 22 | No fix listed |
| sddm project sddm | <= 0.12.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-0856 vendor-advisory
- FEDORA-2015-9f996ea146 third-party-advisory vendor-advisory
- [oss-security] 20151014 CVE-2015-0856: sddm does not prevent access to the KDE crash handler mailing-list third-party-advisory
- 77099 third-party-advisory vdb-entry
- github.com vendor-advisory
- github.com vendor-advisory
- bugs.debian.org issue-tracking