ByteOS Network

NVD Vulnerability Details :

CVE-2015-0856

Deferred

Source-security@debian.org

Published At-24 Nov, 2015 | 20:59

Updated At-12 Apr, 2025 | 10:46

daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Fedora Project

>>fedora>>22

cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

sddm_project>>sddm>>Versions up to 0.12.0(inclusive)

cpe:2.3:a:sddm_project:sddm:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.html	security@debian.org	Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/10/14/2	security@debian.org	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/77099	security@debian.org	Third Party Advisory VDB Entry
https://github.com/sddm/sddm/commit/4cfed6b0a625593fb43876f04badc4dd99799d86	security@debian.org	Vendor Advisory
https://github.com/sddm/sddm/wiki/0.13.0-Release-Announcement	security@debian.org	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/10/14/2	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/77099	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://github.com/sddm/sddm/commit/4cfed6b0a625593fb43876f04badc4dd99799d86	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://github.com/sddm/sddm/wiki/0.13.0-Release-Announcement	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History