Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMCP request packet with no address.
{
"binaries": [
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "gir1.2-lightdm-1"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-gobject-1-0"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-gobject-1-0-dbgsym"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-gobject-1-dev"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-gobject-1-doc"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-qt-3-0"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-qt-3-0-dbgsym"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-qt-dev"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-qt5-3-0"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-qt5-3-0-dbgsym"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "liblightdm-qt5-3-dev"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "lightdm"
},
{
"binary_version": "1.17.2-0ubuntu1",
"binary_name": "lightdm-dbgsym"
}
],
"availability": "No subscription required"
}