CVE-2015-8316 Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMCP...
MediumCVSS 5.9
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMCP request packet with no address.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/lightdm(Debian:12) | < 1.16.6-1 | 1.16.6-1 |
| debian/lightdm(Debian:13) | < 1.16.6-1 | 1.16.6-1 |
| debian/lightdm(Debian:14) | < 1.16.6-1 | 1.16.6-1 |
| lightdm project lightdm | = 1.14.3 | No fix listed |
| lightdm project lightdm | = 1.16 | No fix listed |
| lightdm project lightdm | = 1.16.1 | No fix listed |
| lightdm project lightdm | = 1.16.2 | No fix listed |
| lightdm project lightdm | = 1.16.3 | No fix listed |
| lightdm project lightdm | = 1.16.4 | No fix listed |
References
- Debian Security Tracker CVE-2015-8316 vendor-advisory
- [oss-security] 20151122 Re: CVE request for LightDM - XDMCP denial of service mailing-list vdb-entry
- bugs.launchpad.net issue-tracking third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry