Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-4143
HistoryMay 30, 2014 - 2:55 p.m.

Code injection

2014-05-3014:55:00
PRIOn knowledge base
www.prio-n.com
3

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to invalid salts.

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%