This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2015-8308 →

DEBIAN-CVE-2015-8308

LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 lxdm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-1"}]}]

Debian:13 lxdm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-1"}]}]

Debian:14 lxdm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-1"}]}]