debian/xtrlock vulnerabilities

Latest debian/xtrlock CVEs

Newest publication first

1. DLA-1959-1 xtrlock - security update

   Published 2019-10-14

   Unknown

2. CVE-2016-10894 xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (and thus control) various programs such as Chromium via events such as pan scroll...

   Published 2019-08-16

   Medium·CVSS 4.6 EPSS 0.36%

   xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (and thus control) various programs such as Chromium via events such as pan scrolling, "pinch and zoom" gestures, or even regular mouse clicks (by depressing the...

3. CVE-2005-0079 Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.

   Published 2005-01-29

   Medium·CVSS 4.6 EPSS 0.38%

   Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.

4. DSA-649-1 xtrlock - buffer overflow

   Published 2005-01-20

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.