CVE-2012-0064

NONE EPSS 31.0%
Published Feb 10, 201412y ago · Modified Jun 16, 20262w ago
Find Similar
Published Feb 10, 2014 12y ago
Last Modified Jun 16, 2026 2w ago

Description

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

Threat Intelligence

EPSS Exploit Probability
31.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-264

Affected Products 27

VendorProductVersionRange
xx.org_x11* ≤7.5
xx.org_x111.0any
xx.org_x113.0any
xx.org_x114.0any
xx.org_x115.0any
xx.org_x116.0any
xx.org_x116.1any
xx.org_x116.3any
xx.org_x116.4any
xx.org_x116.5.1any
xx.org_x116.6any
xx.org_x116.7any
xx.org_x116.8any
xx.org_x116.8.1any
xx.org_x116.8.2any
xx.org_x116.9.0any
xx.org_x117.0any
xx.org_x117.1any
xx.org_x117.2any
xx.org_x117.3any
xx.org_x117.4any
xx.org_x117.5any
xkeyboard_config_projectxkeyboard-config* ≤2.4
xkeyboard_config_projectxkeyboard-config2.0any
xkeyboard_config_projectxkeyboard-config2.1any
xkeyboard_config_projectxkeyboard-config2.2any
xkeyboard_config_projectxkeyboard-config2.3any

References 9

  • gu1.aeroxteam.fr http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/
  • lists.x.org http://lists.x.org/archives/xorg-announce/2012-January/001797.html
  • lists.x.org http://lists.x.org/archives/xorg-devel/2012-January/028691.html
  • securitytracker.com http://securitytracker.com/id?1026549
  • who-t.blogspot.com http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html
  • openwall.com http://www.openwall.com/lists/oss-security/2012/01/19/6
  • osvdb.org http://www.osvdb.org/78445
  • x.org http://www.x.org/wiki/Development/Security/
    Vendor Advisory
  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=783039

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.