NetSight
IP …
low2.1

CVE-2014-0979

The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_gree…

Impact

The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) via an empty username.

Affected products

VendorProductAffected versions
OpensuseOpensuse
Versions 12.2, 12.3, 13.1
Lightdm Gtk\+ Greeter ProjectLightdm Gtk\+ Greeter
through 1.7.0
Versions 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5

References