CVE-2011-2187
First published: Wed Nov 27 2019(Updated: )
xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xscreensaver Project Xscreensaver | <5.14 | |
| Debian Debian Linux | =8.0 | |
| Debian Debian Linux | =9.0 | |
| Debian Debian Linux | =10.0 | |
| debian/xscreensaver | 5.45+dfsg1-2 6.06+dfsg1-3+deb12u1 6.08+dfsg1-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627382
- https://security-tracker.debian.org/tracker/CVE-2011-2187
- https://www.jwz.org/xscreensaver/changelog.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2187
- https://access.redhat.com/security/cve/cve-2011-2187
- https://www.openwall.com/lists/oss-security/2011/06/06/17
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/event
- agent/description
- agent/first-publish-date
- agent/tags
- agent/softwarecombine
- vendor/xscreensaver project
- canonical/xscreensaver project xscreensaver
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0
- version/debian debian linux/9.0
- version/debian debian linux/10.0
- package-manager/debian