CVE-2017-7358 In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user l...
HighCVSS 7.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lightdm project lightdm | <= 1.22.0 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.10 | No fix listed |
References
- Debian Security Tracker CVE-2017-7358 vendor-advisory
- bazaar.launchpad.net third-party-advisory vdb-entry
- 97486 third-party-advisory vdb-entry
- launchpad.net third-party-advisory vdb-entry
- lists.freedesktop.org third-party-advisory vdb-entry
- 41923 exploit
- www.ubuntu.com third-party-advisory