Unscored CVE-2013-4426 EUVD-2013-4303GHSA-rgfv-59fj-j4h6

pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple fa…

Published May 19, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash.

References

[oss-security] 20131015 Re: Re: CVE request: pyxtrlock mailing-list
https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG
https://github.com/leonnnn/pyxtrlock/issues/8