Vulnerabilities (CVE)

Filtered by vendor Xscreensaver Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-31523 1 Xscreensaver Project 1 Xscreensaver 2021-04-29 7.2 HIGH 7.8 HIGH
The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency.
CVE-2011-2187 2 Debian, Xscreensaver Project 2 Debian Linux, Xscreensaver 2019-12-16 4.6 MEDIUM 7.8 HIGH
xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.