CVE-2012-1111

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-10-27 · updated 2026-06-16
Weakness: CWE-200

Description

lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact.

Affected products

Robert Ancell Lightdm: through 1.0.8; 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.1.0, 0.1.1 (+35)

References

http://lists.opensuse.org/opensuse-updates/2012-03/msg00019.html
http://seclists.org/oss-sec/2012/q1/557
http://seclists.org/oss-sec/2012/q1/566
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/927060
https://bugzilla.novell.com/show_bug.cgi?id=745339
http://lists.opensuse.org/opensuse-updates/2012-03/msg00019.html
http://seclists.org/oss-sec/2012/q1/557
http://seclists.org/oss-sec/2012/q1/566
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/927060
https://bugzilla.novell.com/show_bug.cgi?id=745339

Get alerted when CVE-2012-1111 or the next vulnerability affects your stack