driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xscreensaver | Aug 30, 2017 | Nov 10, 2015 |
| Debian | — | Upgrade xscreensaver | Feb 2, 2016 | Nov 10, 2015 |
| Freebsd | — | Upgrade xscreensaver-gnomeUpgrade xscreensaverUpgrade xscreensaver-gnome-hacks | Dec 10, 2025 | Oct 27, 2015 |
| Oracle Solaris | — | Upgrade desktop/xscreensaver/hacks/rss-glx to version 5.15-0.175.3.10.0.2.0 on Solaris 11.3Upgrade desktop/xscreensaver to version 5.15-0.175.3.10.0.2.0 on Solaris 11.3Upgrade desktop/xscreensaver/hacks to version 5.15-0.175.3.10.0.2.0 on Solaris 11.3Upgrade desktop/xscreensaver/hacks/hacks-gl to version 5.15-0.175.3.10.0.2.0 on Solaris 11.3 | May 29, 2017 | Nov 10, 2015 |
| Suse | — | Upgrade xscreensaver-dataUpgrade xscreensaverUpgrade xscreensaver-lang | Dec 18, 2015 | Nov 10, 2015 |
| Ubuntu | — | Upgrade xscreensaver | Nov 10, 2015 | Nov 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub