Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Gber

#53445of 53,622
2.1Total CVSS
Vulnerabilities · 1
PT-2014-3992
2.1
2014-01-23
Canonical · Lightdm Gtk+ Greeter · CVE-2014-0979
**Name of the Vulnerable Software and Affected Versions** LightDM GTK+ Greeter versions prior to 1.7.1 **Description** The issue arises from the `start authentication` function in `lightdm-gtk-greeter.c`, which fails to handle the return value from the `lightdm greeter get authentication user` function correctly. This allows local users to cause a denial of service, specifically a NULL pointer dereference, by providing an empty `username`. **Recommendations** For versions prior to 1.7.1, update to version 1.7.1 or later to resolve the issue. As a temporary workaround, consider validating user input to prevent empty usernames from being processed by the `start authentication` function.