Approved changes feed: RSS · Atom
cpe:2.3:a:sddm_project:sddm:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sddm Project (e2142c81-3ab2-5162-839f-be59d62ddfdf) |
|---|---|
| Product | Sddm (8890a38b-3e83-5c3a-a042-650331aa75f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/facorread/sddm |
purl2cpe | 2026-06-01 10:12:48.441811 |
pkg:bitbucket/limux-alumni/sddm |
purl2cpe | 2026-06-01 10:12:48.441815 |
pkg:deb/debian/sddm |
purl2cpe | 2026-06-01 10:12:48.441818 |
pkg:deb/ubuntu/sddm |
purl2cpe | 2026-06-01 10:12:48.441821 |
pkg:github/sddm/sddm |
purl2cpe | 2026-06-01 10:12:48.441824 |
pkg:rpm/fedora/sddm |
purl2cpe | 2026-06-01 10:12:48.441827 |
pkg:rpm/opensuse/sddm |
purl2cpe | 2026-06-01 10:12:48.441829 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-28049 |
vulnerable | 2026-06-08 05:23:53.713226 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14345 |
vulnerable | 2026-06-08 05:10:52.790913 |
Details available
An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and helper/backend/PamBackend.cpp.
Published: 2018-07-17T14:00:00.000Z
Updated: 2024-09-17T01:31:46.724Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0856 |
vulnerable | 2026-06-08 05:06:24.088467 |
Details available
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
Published: 2015-11-24T20:00:00.000Z
Updated: 2024-08-06T04:26:11.232Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7272 |
vulnerable | 2026-06-08 05:05:59.204565 |
Details available
Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance (exploitation requires the user to win a race condition in the ~/.Xauthority chown case, but not other cases).
Published: 2018-03-08T20:00:00.000Z
Updated: 2024-08-06T12:47:32.269Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7271 |
vulnerable | 2026-06-08 05:05:59.203992 |
Details available
Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
Published: 2018-03-08T20:00:00.000Z
Updated: 2024-08-06T12:47:32.910Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.