CVE-2015-0856

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.41%

Published

Nov 24, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.

Weaknesses (CWE)

CWE-264

Affected Products (2)

fedoraproject · fedoravulnerable

sddm_project · sddmvulnerable

References (10)

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.html

Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/10/14/2

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/77099

Third Party AdvisoryVDB Entry

https://github.com/sddm/sddm/commit/4cfed6b0a625593fb43876f04badc4dd99799d86

Vendor Advisory

https://github.com/sddm/sddm/wiki/0.13.0-Release-Announcement

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.html

Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/10/14/2

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/77099

Third Party AdvisoryVDB Entry

https://github.com/sddm/sddm/commit/4cfed6b0a625593fb43876f04badc4dd99799d86

Vendor Advisory

https://github.com/sddm/sddm/wiki/0.13.0-Release-Announcement

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs