CVE-2015-0856
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which...
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
Exploit likelihood
What each source reports
NVD Score used
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
- Record
CVE-2015-0856- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
- Record
CVE-2015-0856- Updated
- 2026-11-02
EUVDEUVD-2015-0867 No score
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
- Record
EUVD-2015-0867- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h2j2-9mv7-h7rv No score
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which...
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
- Record
GHSA-h2j2-9mv7-h7rv- Updated
- 2026-11-02
OSV No score
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
- Record
CVE-2015-0856- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-0856 No score
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
- Record
DEBIAN-CVE-2015-0856- Updated
- 2026-11-02
OSVMGASA-2015-0429 No score
Updated sddm packages fixes security vulnerability
Pavel Avgustinov discovered that SDDM does not disable the KDE crash handler, and certain themes would allow shell access to the sddm user as a result in case of a crash (CVE-2015-0856).
Only SDDM users using the Breeze theme from plasma-workspace are affected.
- Record
MGASA-2015-0429- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10135-1 No score
sddm-0.14.0-2.1 on GA media
These are all security issues fixed in the sddm-0.14.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10135-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-0856 No score
daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
- Record
UBUNTU-CVE-2015-0856- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-0856 is a medium vulnerability (CVSS 4.6) in Sddm Project Sddm, published November 5, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in sddm 0.12.0-5.
References
securityfocus.com/bid/77099
lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.html
github.com/sddm/sddm/wiki/0.13.0-Release-Announcement
openwall.com/lists/oss-security/2015/10/14/2
nvd.nist.gov/vuln/detail/CVE-2015-0856
Show 9 moreShow less
security-tracker.debian.org/tracker/CVE-2015-0856
advisories.mageia.org/MGASA-2015-0429.html
bugs.mageia.org/show_bug.cgi?id=16966
ubuntu.com/security/CVE-2015-0856
cve.org/CVERecord?id=CVE-2015-0856
suse.com/security/cve/CVE-2014-7271