Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 7 Jan 2014 11:47:31 +0100
From: Guido Berhoerster <>
Subject: CVE request: lightdm-gtk-greeter - local DOS due to NULL pointer


an openSUSE user discovered that it is trivial to crash
lightdm-gtk-greeter by entering an empty username due to a NULL
pointer dereference. When a greeter crashes the lightdm daemon
This constitutes a local denial of service which can be triggered
by any unprivileged attacker requiring the intervention of an
administrator to restart lightdm. It affects all versions of

The initial downstream report is at, the bug has
been reported upstream at and
fixes for the 1.1 and 1.3 series are available at

Could a CVE be assigned to this issue please?
Guido Berhoerster

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ