CVE-2011-2187

HIGH 7.8CVE-2011-2187 · Published 27/11/2019 · updated 16/06/2026

In short

CVE-2011-2187 is a HIGH (CVSS 7.8) vulnerability affecting xscreensaver (xscreensaver project).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.8% of all vulnerabilities.
Fix: update to 5.14 or later.

Package	Affected versions	Patched versions
xscreensaver xscreensaver_project	`< 5.14`	`5.14`

Description

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.

References

access.redhat.com/security/cve/cve-2011-2187 · Third Party Advisory
bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
bugzilla.redhat.com/show_bug.cgi · Exploit
security-tracker.debian.org/tracker/CVE-2011-2187 · Third Party Advisory
jwz.org/xscreensaver/changelog.html · Release Notes
openwall.com/lists/oss-security/2011/06/06/17 · Mailing List

More vulnerabilities in xscreensaver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

xscreensaver

xscreensaver_project

< 5.14

5.14

More vulnerabilities in xscreensaver

See all →