{"id":"USN-4533-1","aliases":[],"status":"published","title":"ldm vulnerabilities","description":"Veeti Veteläinen discovered that the LTSP Display Manager (ldm)\nincorrectly handled user logins from unsupported shells. A local attacker\ncould possibly use this issue to gain root privileges. (CVE-2019-20373)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2020-09-22T20:02:34Z","modified":"2026-02-10T04:41:56Z","fixes":[{"ecosystem":"Ubuntu:20.04:LTS","package":"ldm","fixed_in":["2:2.18.06-1+deb10u1build0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ldm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.18.06-1+deb10u1build0.20.04.1"}]}],"versions":["2:2.18.06-1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-4533-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1839431","tags":["report"]}],"sources":{"osv":[{"id":"USN-4533-1","title":"ldm vulnerabilities","description":"Veeti Veteläinen discovered that the LTSP Display Manager (ldm)\nincorrectly handled user logins from unsupported shells. A local attacker\ncould possibly use this issue to gain root privileges. (CVE-2019-20373)\n","status":"published","published":"2020-09-22T20:02:34Z","modified":"2026-02-10T04:41:56Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}