GCVE-110-MAGEIA-2020-412

Advisory Published

Vulnetix · Advisory published November 10, 2020

Fabian Vogt discovered a flaw in sddm before 0.19.0. A local attacker can take advantage of a race condition when creating the Xauthority file to escalate privileges (CVE-2020-28049).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	sddm	0 (affected), 0.18.1-3.1.mga7 (unaffected)	—

Aliases

CVE-2020-28049

References

Updated sddm package fixes a security vulnerability

advisory

Updated sddm package fixes a security vulnerability

issue

Updated sddm package fixes a security vulnerability

issue

Updated sddm package fixes a security vulnerability

advisory

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON