CVE-2019-19520

xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because…

published December 4, 2019

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01347 · 71.2th percentile
Published
2019-12-04T23:34Z
EPSS history
Timeline
  • 04 DEC 23:34Z
    xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because…
    cvelistv5