Debian/xscreensaver: medium 4.6
XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authe
Action: Upgrade xscreensaver to 5.45+dfsg1-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.45+dfsg1-2 | - |
Fixed versions
| 5.45+dfsg1-2 |
Sources
- osv: DEBIAN-CVE-2021-34557#Debian:14/xscreensaver
- https://security-tracker.debian.org/tracker/CVE-2021-34557
published · modified · JSON