CVE-2010-0285

描述

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.

如何修補 CVE-2010-0285

要修補 CVE-2010-0285,請將受影響套件升級到下列已修補版本。

• Debian/gnome-screensaver—升級至 2.28.3-1 或更新版本

CVE-2010-0285 正在被利用嗎?

低 — EPSS 為 0.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 2.28.3-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2010-0285