2.1

CVE-2013-4143

The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to invalid salts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
David Bagley ≫ Xlockmore Version <= 5.42
David Bagley ≫ Xlockmore Version5.24
David Bagley ≫ Xlockmore Version5.25
David Bagley ≫ Xlockmore Version5.26
David Bagley ≫ Xlockmore Version5.27
David Bagley ≫ Xlockmore Version5.28
David Bagley ≫ Xlockmore Version5.29
David Bagley ≫ Xlockmore Version5.30
David Bagley ≫ Xlockmore Version5.31
David Bagley ≫ Xlockmore Version5.32
David Bagley ≫ Xlockmore Version5.33
David Bagley ≫ Xlockmore Version5.34
David Bagley ≫ Xlockmore Version5.35
David Bagley ≫ Xlockmore Version5.36
David Bagley ≫ Xlockmore Version5.37
David Bagley ≫ Xlockmore Version5.38
David Bagley ≫ Xlockmore Version5.39
David Bagley ≫ Xlockmore Version5.40
David Bagley ≫ Xlockmore Version5.41
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.162
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.