CVE-2017-8900

Опубликовано: 12 мая 2017

Источник: nvd

CVSS3: 4.6

CVSS2: 2.1

EPSS Низкий

Описание

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session.

Ссылки

http://www.securityfocus.com/bid/98554
Third Party Advisory
VDB Entry
https://launchpad.net/bugs/1663157
Issue Tracking
Patch
Vendor Advisory
https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-8900.html
Patch
Vendor Advisory
https://www.ubuntu.com/usn/usn-3285-1/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/98554
Third Party Advisory
VDB Entry
https://launchpad.net/bugs/1663157
Issue Tracking
Patch
Vendor Advisory
https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-8900.html
Patch
Vendor Advisory
https://www.ubuntu.com/usn/usn-3285-1/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:lightdm_project:lightdm:*:*:*:*:*:*:*:*

Версия до 1.22.0 (включая)

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00049

Низкий

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-8900

CVSS3: 4.6

ubuntu

больше 8 лет назад

CVE-2017-8900

CVSS3: 4.6

debian

больше 8 лет назад

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, ...

GHSA-2r8v-9m34-p378

CVSS3: 4.6

github

больше 3 лет назад

EPSS

Процентиль: 15%

0.00049

Низкий

4.6 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo