CVE-2021-34557

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs

published June 10, 2021

CVSS
—
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video outputs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00480 · 40.5th percentile
Published
2021-06-10T15:54Z
EPSS history
Timeline
  • 10 JUN 15:54Z
    XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs
    cvelistv5