CVE-2017-7358

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.7%

from disclosure to weapon20 days

Published on NVDApr 5

1st PoC+20d

exploitation probability

2.7%top 16% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.

Affected products

n/a · n/a

public PoCs found — 3

githubgithub.com/JonPichel/CVE-2017-7358★ 0 cve_referencewww.exploit-db.com/exploits/41923/unverified exploitdbwww.exploit-db.com/exploits/41923unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://bazaar.launchpad.net/~lightdm-team/lightdm/trunk/revision/2478 https://launchpad.net/bugs/1677924 https://lists.freedesktop.org/archives/lightdm/2017-April/001059.html https://www.exploit-db.com/exploits/41923/https://www.ubuntu.com/usn/usn-3255-1/http://www.securityfocus.com/bid/97486