CVE-2021-31523

ALTO 7.8CVE-2021-31523 · Published 21/04/2021 · updated 17/06/2026

In breve

CVE-2021-31523 è una vulnerabilità ALTO (CVSS 7.8) che riguarda xscreensaver (xscreensaver project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.32%, superiore al 24.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
xscreensaver xscreensaver_project	`= 5.42+dfsg1-1`	No fix yet

Description

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency.

References

openwall.com/lists/oss-security/2021/04/21/3 · Mailing List
openwall.com/lists/oss-security/2021/04/17/1 · Mailing List

Altre vulnerabilità di xscreensaver

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free