CVE-2016-2312Kscreenlocker vulnerability

CWE-2548 documents6 sources
Severity
6.8MEDIUMNVD
EPSS
0.1%
top 76.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 23
Latest updateMay 14

Description

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again.

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 0.9 | Impact: 5.9

Affected Packages4 packages

Debiankde/plasma-workspace< 4:5.4.3-2+3
NVDopensuse/leap42.1

Also affects: Fedora 22, 23

🔴Vulnerability Details

3
GHSA
GHSA-pwf3-h35x-h5rg: Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a sc2022-05-14
CVEList
CVE-2016-2312: Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a sc2016-12-23
OSV
CVE-2016-2312: Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a sc2016-12-23

📋Vendor Advisories

1
Debian
CVE-2016-2312: plasma-workspace - Turning all screens off in Plasma-workspace and kscreenlocker while the lock scr...2016

💬Community

3
Bugzilla
CVE-2016-2312 plasma-workspace: kscreenlocker: Lock screen bypass [fedora-all]2016-02-10
Bugzilla
CVE-2016-2312 plasma-workspace, kscreenlocker: Lock screen bypass2016-02-10
Bugzilla
CVE-2016-2312 plasma-workspace: kscreenlocker: Lock screen bypass [fedora-all]2016-02-10
CVE-2016-2312 — KDE Kscreenlocker vulnerability | cvebase