CVE-2014-7272 - CVE House
Back to Database
Status published High CVE-2014-7272

Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users...

Vulnerability Description

Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance (exploitation requires the user to win a race condition in the ~/.Xauthority chown case, but not other cases).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-7272

Credits & Attribution

No credits recorded in the NVD database.

References

More from sddm project

View All →
CVE-2020-28049
An issue was discovered in SDDM before 0.19.0. It incorrectly...
Unknown 0
CVE-2018-14345
An issue was discovered in SDDM through 0.17.0. If configured...
High 7.5
CVE-2014-7271
Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users...
High 7.8

Affected Vendor

sddm project

View all reports →

Affected Software

sddm, fedora
Vulnerable Versions:
0, 20, 21

Timeline

Official Publish: March 8th, 2018
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.