CVE-2013-4143

no score yetEPSS 0.4%

david bagley xlockmore: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.

The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to invalid salts.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
Published: 2014-05-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

david_bagley:xlockmore

References

http://openwall.com/lists/oss-security/2013/07/16/8
http://openwall.com/lists/oss-security/2013/07/18/6
http://www.tux.org/~bagleyd/xlock/xlockmore.README
http://openwall.com/lists/oss-security/2013/07/16/8
http://openwall.com/lists/oss-security/2013/07/18/6

Check your stack JSON