CVE-2017-8900 LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users....
MediumCVSS 4.6
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lightdm project lightdm | <= 1.22.0 | No fix listed |
References
- 98554 third-party-advisory vdb-entry
- launchpad.net issue-tracking patch vendor-advisory
- people.canonical.com patch vendor-advisory
- www.ubuntu.com patch vendor-advisory
- Debian Security Tracker CVE-2017-8900 vendor-advisory