NVD

Id
29800  
Name
CVE-2014-0979  
Description
The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) via an empty username.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-01-22  
Modified Date
2014-02-21  
Seq
2014-0979  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157379 29800 CVE-2014-0979 FEDORA-2014-1647  View
157380 29800 CVE-2014-0979 FEDORA-2014-1648  View
157381 29800 CVE-2014-0979 openSUSE-SU-2014:0071  View
157382 29800 CVE-2014-0979 [oss-security] 20140107 Re: CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer dereference  View
157383 29800 CVE-2014-0979 64679  View
157384 29800 CVE-2014-0979 https://bugs.launchpad.net/lightdm-gtk-greeter/+bug/1266449  View
157385 29800 CVE-2014-0979 https://bugzilla.novell.com/show_bug.cgi?id=857303  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12354 JVNDB-2014-001229 LightDM GTK+ Greeter の lightdm-gtk-greeter.c におけるサービス運用妨害 (DoS) の脆弱性 LightDM GTK+ Greeter の lightdm-gtk-greeter.c の start_authentication 関数は、lightdm_greeter_get_authentication_user 関数からの戻り値を適切に処理しないため、サービス運用妨害 (NULL ポインタデリファレンス) 状態にされる脆弱性が存在します。 CVE-2014-0979 68380 CVE-2014-0979 29800 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001229.html 2014-01-21 2014-01-24 View