CVE-2015-8025 — Xscreensaver vulnerability
Severity
2.1LOWNVD
EPSS
0.1%
top 82.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 10
Latest updateMay 17
Description
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
CVSS vector
AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9
Affected Packages3 packages
Also affects: Ubuntu Linux 12.04