xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xkeyboard-config. | Aug 30, 2017 | Feb 10, 2014 |
| Debian | — | Upgrade xorg-server | Jul 30, 2024 | Feb 10, 2014 |
| Gentoo Linux | — | Upgrade x11-misc/xkeyboard-config. | Oct 30, 2017 | Feb 10, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub