CVE-2017-8900

—

CVSS 3.0

4.6 medium

EPSS

<1%p35

Published

May 12, 2017 (May 12, 2017)

Modified

Jun 17, 2026

Description

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session.

Vendors: lightdm project
Products: lightdm
Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.