Array index error in LightDM (aka Light Display Manager) 1.14.3,...

5.9 CVSS

Vulnerability Description

Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMCP request packet with no address.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-8316

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from lightdm project

View All →

CVE-2017-8900

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10...

Medium 4.6

CVE-2017-7358

In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh...

High 7.3

Affected Vendor

lightdm project

View all reports →

Affected Software

lightdm

Vulnerable Versions:

1.14.3, 1.16, 1.16.1, 1.16.2, 1.16.3, 1.16.4

Timeline

Official Publish: September 6th, 2017

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.