CVE catalog

CVE-2015-8025

xscreensaver: CVE-2015-8025

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.51% · Oct 25, 2026

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxscreensaversid6.09+dfsg1-2fixed
Debianxscreensaverforky6.09+dfsg1-2fixed
Debianxscreensavertrixie6.09+dfsg1-1fixed
Debianxscreensaverbookworm6.06+dfsg1-3+deb12u1fixed
Susexscreensaverlinux enterprise desktop 125.22-7.1fixed
Susexscreensaverlinux enterprise server 125.22-7.1fixed
Susexscreensaverlinux enterprise server for sap applications 125.22-7.1fixed
Susexscreensaverlinux enterprise desktop 11 sp35.07-6.36.1fixed
Susexscreensaverlinux enterprise desktop 11 sp45.07-6.36.1fixed
Susexscreensaverlinux enterprise server 11 sp35.07-6.36.1fixed
Susexscreensaverlinux enterprise server 11 sp3-teradata5.07-6.36.1fixed
Susexscreensaverlinux enterprise server for sap applications 11 sp35.07-6.36.1fixed
Susexscreensaverlinux enterprise server 11 sp45.07-6.36.1fixed
Susexscreensaverlinux enterprise server for sap applications 11 sp45.07-6.36.1fixed
Ubuntuxscreensaver14.045.15-3ubuntu1vulnerable
Ubuntuxscreensaver14.045.15-3+deb7u1ubuntu0.1fixed
Susexscreensaverlinux enterprise desktop 12 sp15.22-7.1fixed
Susexscreensaverlinux enterprise server 12 sp15.22-7.1fixed
Susexscreensaverlinux enterprise server for sap applications 12 sp15.22-7.1fixed
Opensusexscreensavertumbleweed5.34-1.6fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxscreensaversourcesid5.34-1not yet assignedNot reported[802914]
Debianxscreensaversourceforky5.34-1not yet assignedNot reported[802914]
Debianxscreensaversourcetrixie5.34-1not yet assignedNot reported[802914]
Debianxscreensaversourcebookworm5.34-1not yet assignedNot reported[802914]
Susexscreensaverrpmlinux enterprise desktop 125.22-7.1Not reportedSUSE-SU-2015:2053-1Not reported
Susexscreensaverrpmlinux enterprise server 125.22-7.1Not reportedSUSE-SU-2015:2053-1Not reported
Susexscreensaverrpmlinux enterprise server for sap applications 125.22-7.1Not reportedSUSE-SU-2015:2053-1Not reported
Susexscreensaverrpmlinux enterprise desktop 11 sp35.07-6.36.1Not reportedSUSE-SU-2015:2054-1Not reported
Susexscreensaverrpmlinux enterprise desktop 11 sp45.07-6.36.1Not reportedSUSE-SU-2015:2054-1Not reported
Susexscreensaverrpmlinux enterprise server 11 sp35.07-6.36.1Not reportedSUSE-SU-2015:2054-1Not reported
Susexscreensaverrpmlinux enterprise server 11 sp3-teradata5.07-6.36.1Not reportedSUSE-SU-2015:2054-1Not reported
Susexscreensaverrpmlinux enterprise server for sap applications 11 sp35.07-6.36.1Not reportedSUSE-SU-2015:2054-1Not reported
Susexscreensaverrpmlinux enterprise server 11 sp45.07-6.36.1Not reportedSUSE-SU-2015:2054-1Not reported
Susexscreensaverrpmlinux enterprise server for sap applications 11 sp45.07-6.36.1Not reportedSUSE-SU-2015:2054-1Not reported
Ubuntuxscreensaverdeb14.045.15-3+deb7u1ubuntu0.1Not reportedUBUNTU-CVE-2015-8025Not reported
Susexscreensaverrpmlinux enterprise desktop 12 sp15.22-7.1Not reportedSUSE-SU-2015:2053-2Not reported
Susexscreensaverrpmlinux enterprise server 12 sp15.22-7.1Not reportedSUSE-SU-2015:2053-2Not reported
Susexscreensaverrpmlinux enterprise server for sap applications 12 sp15.22-7.1Not reportedSUSE-SU-2015:2053-2Not reported
Opensusexscreensaverrpmtumbleweed5.34-1.6Not reportedOPENSUSE-SU-2024:10216-1Not reported

[Debian bug #802914]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [xscreensaver-data]Unknown

    Source package: [xscreensaver]

    Details (1)

    • 6.15-3.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.34-1.6

      Version impact unknown

      dsa · xscreensaver · opensuse · tumbleweed

  • [xscreensaver-data-extra]Unknown

    Source package: [xscreensaver]

    Details (1)

    • 6.15-3.3 · x86_64 · tumbleweed

      Unknown · Fixed: 5.34-1.6

      Version impact unknown

      dsa · xscreensaver · opensuse · tumbleweed

  • [xscreensaver-lang]Unknown

    Source package: [xscreensaver]

    Details (1)

    • 6.15-3.3 · noarch · tumbleweed

      Unknown · Fixed: 5.34-1.6

      Version impact unknown

      dsa · xscreensaver · opensuse · tumbleweed

  • [xscreensaver]Fixed

    Source package: [xscreensaver]

    Details (1)

    • 6.15-3.3 · x86_64 · tumbleweed

      Fixed · Fixed: 5.34-1.6

      dsa · xscreensaver · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [xscreensaver]Fixed
    Details (4)

    • 6.06+dfsg1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.06+dfsg1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

  • [xscreensaver-data]Fixed

    Source package: [xscreensaver]

    Details (4)

    • 6.06+dfsg1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.06+dfsg1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

  • [xscreensaver-data-extra]Fixed

    Source package: [xscreensaver]

    Details (4)

    • 6.06+dfsg1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.06+dfsg1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

  • [xscreensaver-gl]Fixed

    Source package: [xscreensaver]

    Details (4)

    • 6.06+dfsg1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.06+dfsg1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

  • [xscreensaver-gl-extra]Fixed

    Source package: [xscreensaver]

    Details (4)

    • 6.06+dfsg1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.06+dfsg1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

  • [xscreensaver-screensaver-bsod]Fixed

    Source package: [xscreensaver]

    Details (4)

    • 6.06+dfsg1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.06+dfsg1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

  • [xscreensaver-screensaver-webcollage]Fixed

    Source package: [xscreensaver]

    Details (4)

    • 6.06+dfsg1-3+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.06+dfsg1-3+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

    • 6.08+dfsg1-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · bookworm; dsa · xscreensaver · debian · 12

[Debian 13 (Trixie)]

  • [xscreensaver]Fixed
    Details (2)

    • 6.09+dfsg1-1 · amd64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

    • 6.09+dfsg1-1 · arm64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

  • [xscreensaver-data]Fixed

    Source package: [xscreensaver]

    Details (2)

    • 6.09+dfsg1-1 · amd64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

    • 6.09+dfsg1-1 · arm64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

  • [xscreensaver-data-extra]Fixed

    Source package: [xscreensaver]

    Details (2)

    • 6.09+dfsg1-1 · amd64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

    • 6.09+dfsg1-1 · arm64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

  • [xscreensaver-gl]Fixed

    Source package: [xscreensaver]

    Details (2)

    • 6.09+dfsg1-1 · amd64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

    • 6.09+dfsg1-1 · arm64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

  • [xscreensaver-gl-extra]Fixed

    Source package: [xscreensaver]

    Details (2)

    • 6.09+dfsg1-1 · amd64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

    • 6.09+dfsg1-1 · arm64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

  • [xscreensaver-screensaver-bsod]Fixed

    Source package: [xscreensaver]

    Details (2)

    • 6.09+dfsg1-1 · amd64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

    • 6.09+dfsg1-1 · arm64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

  • [xscreensaver-screensaver-webcollage]Fixed

    Source package: [xscreensaver]

    Details (2)

    • 6.09+dfsg1-1 · amd64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

    • 6.09+dfsg1-1 · arm64 · trixie

      Fixed · Fixed: 5.34-1

      dsa · xscreensaver · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]