4.6

CVE-2017-8900

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lightdm Project ≫ Lightdm Version <= 1.22.0
   Canonical ≫ Ubuntu Linux Version16.10
   Canonical ≫ Ubuntu Linux Version17.04
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.333
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 0.9 3.6
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/98554
Third Party Advisory
VDB Entry
https://launchpad.net/bugs/1663157
Patch
Vendor Advisory
Issue Tracking
https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-8900.html
Patch
Vendor Advisory
https://www.ubuntu.com/usn/usn-3285-1/
Patch
Vendor Advisory