Lucene search

K
mageiaGentoo FoundationMGASA-2013-0225
HistoryJul 21, 2013 - 1:31 p.m.

Updated xlockmore package fixes security vulnerability

2013-07-2113:31:57
Gentoo Foundation
advisories.mageia.org
7

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

20.8%

xlockmore before 5.43 contains a security flaw related to potential NULL pointer dereferences when authenticating via glibc 2.17+'s crypt() function. Under certain conditions the NULL pointers can trigger a crash in xlockmore effectively bypassing the screen lock (CVE-2013-4143).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchxlockmore< 5.41-2.1xlockmore-5.41-2.1.mga3

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

20.8%