NVD

Id
28374  
Name
CVE-2015-8025  
Description
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-11-10  
Modified Date
2016-12-07  
Seq
2015-8025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149154 28374 CVE-2015-8025 openSUSE-SU-2015:2032  View
149155 28374 CVE-2015-8025 DSA-3438  View
149156 28374 CVE-2015-8025 [oss-security] 20151024 CVE request: xscreensaver aborts when unpluging second monitor cable when asking password  View
149157 28374 CVE-2015-8025 [oss-security] 20151025 Re: CVE request: xscreensaver aborts when unpluging second monitor cable when asking password  View
149158 28374 CVE-2015-8025 [oss-security] 20151029 Re: CVE request: xscreensaver aborts when unpluging second monitor cable when asking password  View
149159 28374 CVE-2015-8025 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
149160 28374 CVE-2015-8025 1034052  View
149161 28374 CVE-2015-8025 USN-2789-1  View
149162 28374 CVE-2015-8025 https://twitter.com/Thaolia/status/656823859304398848  View
149163 28374 CVE-2015-8025 https://www.jwz.org/blog/2015/10/xscreensaver-5-34/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10559 JVNDB-2015-005879 XScreenSaver の driver/subprocs.c におけるロックスクリーンを回避される脆弱性 XScreenSaver の driver/subprocs.c は、内部の整合性チェックを適切に実行しないため、ロックスクリーンを回避される脆弱性が存在します。 CVE-2015-8025 85250 CVE-2015-8025 28374 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005879.html 2015-10-24 2015-11-13 View