CVE-2013-1940

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow…

published May 13, 2013

CVSS
—
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.4th percentile
Published
2013-05-13T23:00Z
EPSS history
Timeline
  • 13 MAY 23:00Z
    X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow…
    cvelistv5