Description
gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | gnome-screensaver | 2.28.2-1 | — |
| Debian 12 | gnome-screensaver | 2.28.2-1 | — |
References
- 38468 third-party-advisory
- 62219 vdb-entry
- 38149 vdb-entry
- USN-898-1 vendor-advisory
- 38532 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=562217
- http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950
- 38534 third-party-advisory
- http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f
- MDVSA-2010:040 vendor-advisory
- https://bugzilla.gnome.org/show_bug.cgi?id=609337
- http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news
- FEDORA-2010-1556 vendor-advisory