RSS   Vulnerabilities for 'Xscreensaver'   RSS

2021-04-21
 
CVE-2021-31523

CWE-269
 

 
The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency.

 
2019-11-27
 
CVE-2011-2187

CWE-306
 

 
xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.

 
2015-11-10
 
CVE-2015-8025

 

 
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.

 


Copyright 2024, cxsecurity.com

 

Back to Top