A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade caribou | Jul 30, 2024 | Mar 25, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2022 |
| Suse | — | Upgrade caribouUpgrade caribou-gtk-module-commonUpgrade libcaribou0Upgrade caribou-gtk2-moduleUpgrade caribou-gtk3-moduleUpgrade caribou-develUpgrade caribou-commonUpgrade typelib-1_0-caribou-1_0Upgrade caribou-lang | Jun 11, 2021 | Jun 10, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub