PT-2014-2787 · Pyxtrlock · Pyxtrlock

Paul Lhussiez · Publicado 2014-05-19 · Atualizado 2014-05-19 · CVE-2013-4426

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions pyxtrlock versions prior to 0.1

Description The issue allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash due to an incorrect variable name.

Recommendations For versions prior to 0.1, update to version 0.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2013-4426

Produtos afetados

Pyxtrlock

Referências · 4

• https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG · Nota
• https://github.com/leonnnn/pyxtrlock/issues/8 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4426 · Nota de Segurança
• http://seclists.org/oss-sec/2013/q4/109 · Nota