CVE-2014-7271

Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
sddm_projectsddm
𝑥
< 0.10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sddm
bullseye
0.19.0-3
fixed
bookworm
0.19.0-5
fixed
sid
0.21.0-1.1
fixed
trixie
0.21.0-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sddm
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141494.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141550.html
http://www.openwall.com/lists/oss-security/2014/10/06/4
http://www.securityfocus.com/bid/70767
https://bugzilla.redhat.com/show_bug.cgi?id=1149608
https://exchange.xforce.ibmcloud.com/vulnerabilities/98421
https://github.com/sddm/sddm/pull/279/files
https://github.com/sddm/sddm/wiki/0.10.0-Release-Announcement
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141494.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141550.html
http://www.openwall.com/lists/oss-security/2014/10/06/4
http://www.securityfocus.com/bid/70767
https://bugzilla.redhat.com/show_bug.cgi?id=1149608
https://exchange.xforce.ibmcloud.com/vulnerabilities/98421
https://github.com/sddm/sddm/pull/279/files
https://github.com/sddm/sddm/wiki/0.10.0-Release-Announcement