CVE-2014-0979

Severity

21%

Complexity

39%

Confidentiality

48%

Per: http://cwe.mitre.org/data/definitions/476.html "CWE-476: NULL Pointer Dereference"

The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) via an empty username.

Per: http://cwe.mitre.org/data/definitions/476.html "CWE-476: NULL Pointer Dereference"

CVSS 2.0 Base Score 2.1. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:N/C:N/I:N/A:P).

Overview

First reported 11 years ago

2014-01-23 01:55:00

Last updated 6 years ago

2018-10-30 16:27:00

Affected Software

OpenSUSE 12.2

12.2

OpenSUSE 12.3

12.3

OpenSUSE 13.1

13.1

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.1.1

1.1.1

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.1.2

1.1.2

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.1.3

1.1.3

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.1.4

1.1.4

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.1.5

1.1.5

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.1.6

1.1.6

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.3.0

1.3.0

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.3.1

1.3.1

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.5.0

1.5.0

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.5.1

1.5.1

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.5.2

1.5.2

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.6.0

1.6.0

LightDM GTK+ Greeter Project LightDM GTK+ Greeter 1.6.1

1.6.1

References

FEDORA-2014-1647

FEDORA-2014-1648

openSUSE-SU-2014:0071

56211

Vendor Advisory

56423