Summary
It was discovered that LightDM incorrectly handled home directory creation for
guest users. A local attacker could use this issue to gain ownership of
arbitrary directory paths and possibly gain administrative privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | lightdm | 1.18.3-0ubuntu1.1 |
Vulnerabilities 1
-
Unscored —CVE-2017-7358 Public exploit
In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitra…
References
-
report
https://ubuntu.com/security/CVE-2017-7358