Lucene search
+L

327 matches found

CVE
CVE
added 2021/06/10 3:54 p.m.125 views

CVE-2021-34557

CVE-2021-34557 affects XScreenSaver 5.45. A buffer overflow in update_screen_layout() can bypass the standard screen lock authentication, but exploitation requires the attacker to physically disconnect more than ten video outputs. Documents indicate this is mitigated in various vendor advisories ...

4.6CVSS4.9AI score0.0048EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
added 2021/06/10 3:54 p.m.58 views

CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

4.6CVSS3AI score0.0048EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/06/10 3:54 p.m.39 views

CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

5.3AI score0.0048EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
added 2021/06/10 3:54 p.m.84 views

CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video...

4.6CVSS5AI score0.0048EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/06/10 12:0 a.m.7 views

XScreenSaver 缓冲区错误漏洞

XScreenSaver is an open source screensaver written in C. XScreenSaver suffers from a buffer error vulnerability that stems from updatescreenlayout causing a buffer overflow when the application has more than 10 disconnectable video outputs. An attacker could bypass the authentication mechanism...

4.6CVSS6AI score0.0048EPSS
SaveExploits1References9
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2015:2054-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.5AI score0.00508EPSS
SaveExploits1References4
Veracode
Veracode
added 2021/06/08 2:32 p.m.14 views

Privilege Escalation

xscreensaver is vulnerable to privilege escalation. The vulnerability exists due to of an incompatible setting in /usr/libexec/xscreensaver/sonar file...

7.8CVSS3.4AI score0.00318EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/04/22 12:0 a.m.9 views

Debian xscreensaver has unspecified vulnerability

XScreenSaver is an open source screen saver program written in C language. A security vulnerability exists in Debian xscreensaver 5.42+dfsg1-1, which can be exploited by attackers to gain privileges...

7.8CVSS7AI score0.00318EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/21 7:15 p.m.20 views

CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

7.8CVSS0.00318EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/21 7:15 p.m.5 views

DEBIAN-CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

7.8CVSS7.3AI score0.00318EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/21 7:15 p.m.5 views

CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

7.8CVSS7.7AI score
SaveExploits0References2
Prion
Prion
added 2021/04/21 7:15 p.m.16 views

Code injection

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

7.2CVSS7.7AI score0.00318EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/04/21 7:15 p.m.23 views

CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

7.8CVSS7.1AI score0.00318EPSS
SaveExploits0References4
OSV
OSV
added 2021/04/21 7:15 p.m.5 views

UBUNTU-CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

7.8CVSS5.8AI score0.00318EPSS
SaveExploits0References5
CVE
CVE
added 2021/04/21 6:41 p.m.52 views

CVE-2021-31523

The CVE-2021-31523 vulnerability affects the Debian xscreensaver package (5.42+dfsg1-1) for XScreenSaver, where cap_net_raw is enabled for the /usr/libexec/xscreensaver/sonar binary. This configuration could allow local users to gain privileges, as the behavior is described as potentially incompa...

7.8CVSS7.7AI score0.00318EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/21 6:41 p.m.22 views

CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

8AI score0.00318EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2021/04/21 6:41 p.m.31 views

CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

7.8CVSS5.5AI score0.00318EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.6 views

XScreenSaver 安全漏洞

XScreenSaver is an open source screen saver program written in C language. A security vulnerability exists in Debian xscreensaver 5.42+dfsg1-1, which can be exploited by attackers to gain privileges...

7.8CVSS5.6AI score0.00318EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2015:2053-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.5AI score0.00508EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.13 views

SUSE: Security Advisory (SUSE-SU-2015:2053-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.5AI score0.00508EPSS
SaveExploits1References4
Rows per page
Query Builder