CVE-2015-0856

daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.

• CWE-264

• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/10/14/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/77099Third Party Advisory, VDB Entry
• https://github.com/sddm/sddm/commit/4cfed6b0a625593fb43876f04badc4dd99799d86Vendor Advisory
• https://github.com/sddm/sddm/wiki/0.13.0-Release-AnnouncementVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/10/14/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/77099Third Party Advisory, VDB Entry
• https://github.com/sddm/sddm/commit/4cfed6b0a625593fb43876f04badc4dd99799d86Vendor Advisory
• https://github.com/sddm/sddm/wiki/0.13.0-Release-AnnouncementVendor Advisory

Published

Nov 24, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0850The Git plugin for FusionForge before 6.0rc4 allows remote a…
• CVE-2015-0851XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibbol…
• CVE-2015-0852Multiple integer underflows in PluginPCX.cpp in FreeImage 3.…
• CVE-2015-0853svn-workbench 1.6.2 and earlier on a system with xeyes insta…8.8
• CVE-2015-0854App/HelperFunctions.pm in Shutter through 0.93.1 allows user…
• CVE-2015-0855The _mediaLibraryPlayCb function in mainwindow.py in pitivi …
• CVE-2015-0857Cool Projects TarDiff allows remote attackers to execute arb…
• CVE-2015-0858Cool Projects TarDiff allows local users to write to arbitra…
• CVE-2015-0859The Debian build procedure for the smokeping package in whee…
• CVE-2015-0860Off-by-one error in the extracthalf function in dpkg-deb/ext…
• CVE-2015-0861model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x …
• CVE-2015-0862Multiple cross-site scripting (XSS) vulnerabilities in the m…