Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed

Permalink CVE-1999-0038

8.4 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 5 months, 1 week ago by @LeSuisse Activity log

Created suggestion 5 months, 1 week ago
@LeSuisse ignored package xlockmore 5 months, 1 week ago
@LeSuisse dismissed 5 months, 1 week ago

Buffer overflow in xlock program allows local users to execute …

Buffer overflow in xlock program allows local users to execute commands as root.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 x_refsource_MISCx_transferred

Affected products

n/a

==n/a

xlock

*

Ignored packages (1)

pkgs.xlockmore

Screen locker for the X Window System

nixos-unstable 5.87
- nixpkgs-unstable 5.87
- nixos-unstable-small 5.87

Old issue. Current stable branch was never impacted.