CVE-2017-7358

Опубликовано: 05 апр. 2017

Источник: nvd

CVSS3: 7.3

CVSS2: 6.9

EPSS Низкий

Описание

In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.

Ссылки

http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/97486
Third Party Advisory
VDB Entry
https://launchpad.net/bugs/1677924
Third Party Advisory
VDB Entry
https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41923/
https://www.ubuntu.com/usn/usn-3255-1/
Third Party Advisory
http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/97486
Third Party Advisory
VDB Entry
https://launchpad.net/bugs/1677924
Third Party Advisory
VDB Entry
https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41923/
https://www.ubuntu.com/usn/usn-3255-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lightdm_project:lightdm:*:*:*:*:*:*:*:*

Версия до 1.22.0 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01737

Низкий

7.3 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2017-7358

CVSS3: 7.3

ubuntu

почти 9 лет назад

CVE-2017-7358

CVSS3: 7.3

debian

почти 9 лет назад

In LightDM through 1.22.0, a directory traversal issue in debian/guest ...

GHSA-487j-vfqw-h49x

CVSS3: 7.3

github

больше 3 лет назад

EPSS

Процентиль: 82%

0.01737

Низкий

7.3 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-22