Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2642-1

Опубликовано: 03 авг. 2022
Источник: suse-cvrf

Описание

Security update for xscreensaver

This update for xscreensaver fixes the following issues:

  • CVE-2021-34557: Fixed potential crash and unlock while disconnecting video output with more than 10 monitors (bsc#1186918)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
xscreensaver-5.22-8.3.1
xscreensaver-data-5.22-8.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
xscreensaver-5.22-8.3.1
xscreensaver-data-5.22-8.3.1

Ссылки

Описание

XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video outputs.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:xscreensaver-5.22-8.3.1
SUSE Linux Enterprise Server 12 SP5:xscreensaver-data-5.22-8.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:xscreensaver-5.22-8.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:xscreensaver-data-5.22-8.3.1
Ссылки