Lucene search
PRIOn knowledge basePRION:CVE-2021-34557HistoryJun 10, 2021 - 4:15 p.m.
Buffer overflow
2021-06-1016:15:00
PRIOn knowledge base
www.prio-n.com
1
XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video outputs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fedora | eq | 33 | |
| xscreensaver | eq | 5.45 |
References
www.openwall.com/lists/oss-security/2021/06/11/1
www.openwall.com/lists/oss-security/2021/07/06/2
github.com/QubesOS/qubes-issues/issues/6595
github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-068-2021.txt
github.com/QubesOS/qubes-xscreensaver/blob/master/0001-Fix-updating-outputs-info.patch
lists.fedoraproject.org/archives/list/[email protected]/message/TC4QB7TRS4GS7LDXQQ4PC6J3LVFJYISV/
www.openwall.com/lists/oss-security/2021/06/05/1
Related
openvas
openvas
openSUSE: Security Advisory for xscreensaver (SUSE-SU-2022:2641-1)
2022-08-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2641-1)
2022-08-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2642-1)
2022-08-04 00:00:00
nvd
nvd
CVE-2021-34557
2021-06-10 16:15:08
ubuntucve
ubuntucve
CVE-2021-34557
2021-06-10 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : xscreensaver (SUSE-SU-2022:2641-1)
2022-08-04 00:00:00
SUSE SLES12 Security Update : xscreensaver (SUSE-SU-2022:2642-1)
2022-08-04 00:00:00
cnvd
cnvd
XScreenSaver buffer overflow vulnerability
2021-06-12 00:00:00
cve
cve
CVE-2021-34557
2021-06-10 16:15:08
debiancve
debiancve
CVE-2021-34557
2021-06-10 16:15:08
fedora
fedora
[SECURITY] Fedora 33 Update: xscreensaver-5.45-2.fc33
2021-08-19 01:11:08
alpinelinux
alpinelinux
CVE-2021-34557
2021-06-10 16:15:08
mageia
mageia
Updated xscreensaver packages fix security vulnerability
2021-06-23 20:11:28
cvelist
cvelist
CVE-2021-34557
2021-06-10 15:54:35
suse
suse
Security update for xscreensaver (moderate)
2022-08-03 00:00:00