| Package | Affected versions | Patched versions |
|---|---|---|
| xlock | = 4.16= 4.16.1 |
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free