CVE catalog
CVE-2017-7358
lightdm: CVE-2017-7358
- Severity
- Low
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.67% · Oct 25, 2026
In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | lightdm | sid | 1.33.1-4 | not affected |
| Debian | lightdm | forky | 1.33.1-4 | not affected |
| Debian | lightdm | trixie | 1.32.0-6 | not affected |
| Debian | lightdm | bookworm | 1.26.0-8 | not affected |
| Ubuntu | lightdm | 16.04 | 1.16.4-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.0-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.1-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.1-0ubuntu2 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.2-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.3-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.4-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.5-0ubuntu2 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.6-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.0-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.0-0ubuntu2 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.1-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.2-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.2-0ubuntu2 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.3-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.3-0ubuntu1.1 | fixed |
| Ubuntu | lightdm | 16.04 | 1.16.4-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.0-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.1-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.1-0ubuntu2 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.2-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.3-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.4-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.5-0ubuntu2 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.17.6-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.0-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.0-0ubuntu2 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.1-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.2-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.2-0ubuntu2 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.3-0ubuntu1 | vulnerable |
| Ubuntu | lightdm | 16.04 | 1.18.3-0ubuntu1.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | lightdm | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | lightdm | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | lightdm | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | lightdm | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Ubuntu | lightdm | deb | 16.04 | 1.18.3-0ubuntu1.1 | Not reported | UBUNTU-CVE-2017-7358 | Not reported |
| Ubuntu | lightdm | deb | 16.04 | 1.18.3-0ubuntu1.1 | Not reported | USN-3255-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [gir1.2-lightdm-1]Not affected
Source package: [lightdm]
Details (2)
1.26.0-8· amd64 · bookwormNot affected
dsa · lightdm · debian · bookworm
1.26.0-8· arm64 · bookwormNot affected
dsa · lightdm · debian · bookworm
- [liblightdm-gobject-1-0]Not affected
Source package: [lightdm]
Details (2)
1.26.0-8· amd64 · bookwormNot affected
dsa · lightdm · debian · bookworm
1.26.0-8· arm64 · bookwormNot affected
dsa · lightdm · debian · bookworm
- [liblightdm-gobject-dev]Not affected
Source package: [lightdm]
Details (2)
1.26.0-8· amd64 · bookwormNot affected
dsa · lightdm · debian · bookworm
1.26.0-8· arm64 · bookwormNot affected
dsa · lightdm · debian · bookworm
- [liblightdm-qt5-3-0]Not affected
Source package: [lightdm]
Details (2)
1.26.0-8· amd64 · bookwormNot affected
dsa · lightdm · debian · bookworm
1.26.0-8· arm64 · bookwormNot affected
dsa · lightdm · debian · bookworm
- [liblightdm-qt5-3-dev]Not affected
Source package: [lightdm]
Details (2)
1.26.0-8· amd64 · bookwormNot affected
dsa · lightdm · debian · bookworm
1.26.0-8· arm64 · bookwormNot affected
dsa · lightdm · debian · bookworm
- [lightdm]Not affected
Details (2)
1.26.0-8· amd64 · bookwormNot affected
dsa · lightdm · debian · bookworm
1.26.0-8· arm64 · bookwormNot affected
dsa · lightdm · debian · bookworm
- [lightdm-vala]Not affected
Source package: [lightdm]
Details (2)
1.26.0-8· amd64 · bookwormNot affected
dsa · lightdm · debian · bookworm
1.26.0-8· arm64 · bookwormNot affected
dsa · lightdm · debian · bookworm
Observed: