CVE-2015-8308: Lxdm Project Lxdm

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections.

Affected products

• Lxdm Project Lxdm: up to and including 0.5.1

Published 2017-08-24. Last modified 2026-06-17.