CVE-2015-0856: Medium severity red hat fedora vulnerability
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0856?
CVE-2015-0856 has a medium severity rating due to its potential to allow local users to gain privileges by exploiting a flaw in the KDE crash handler.
How do I fix CVE-2015-0856?
To mitigate CVE-2015-0856, upgrade to SDDM version 0.13.0 or later, which properly disables the KDE crash handler.
Which software is affected by CVE-2015-0856?
CVE-2015-0856 affects SDDM versions up to and including 0.12.0 and Fedora 22.
Can local users exploit CVE-2015-0856?
Yes, local users can exploit CVE-2015-0856 by crashing a greeter using certain themes to gain elevated privileges.
What should I do if I'm using an affected version of SDDM?
If using an affected version of SDDM, it is important to update to a fixed version to prevent privilege escalation vulnerabilities.