VulnerabilityModified
CVE-2010-0923
Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a…
MEDIUM 6.9EPSS 0.28%
Does this matter?
Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.
Description
Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing the Enter key at a certain time, related to multiple forked processes.
- CVSS 2.0
- 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 0.28% probability · 21th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- kde/kde sc
- Source
- cve@mitre.org
References
- http://bugs.kde.org/show_bug.cgi?id=226449
- http://marc.info/?l=oss-security&m=126598163422670&w=2
- http://marc.info/?l=oss-security&m=126599909614401&w=2
- http://marc.info/?l=oss-security&m=126600468622421&w=2
- http://secunia.com/advisories/38600Vendor Advisory
- http://securitytracker.com/id?1023641
- http://websvn.kde.org/?revision=1089213&view=revisionPatch
- http://websvn.kde.org/?view=revision&revision=1089241Patch
- http://websvn.kde.org/trunk/KDE/kdebase/workspace/krunner/lock/lockdlg.cc?r1=1089213&r2=1089212&pathrev=1089213
- http://www.kde.org/info/security/advisory-20100217-1.txt
- http://www.openwall.com/lists/oss-security/2010/02/17/3
- http://www.vupen.com/english/advisories/2010/0409Patch, Vendor Advisory
- https://bugs.kde.org/show_bug.cgi?id=217882
- https://bugzilla.novell.com/show_bug.cgi?id=579280
- http://bugs.kde.org/show_bug.cgi?id=226449
- http://marc.info/?l=oss-security&m=126598163422670&w=2
- http://marc.info/?l=oss-security&m=126599909614401&w=2
- http://marc.info/?l=oss-security&m=126600468622421&w=2
- http://secunia.com/advisories/38600Vendor Advisory
- http://securitytracker.com/id?1023641
- http://websvn.kde.org/?revision=1089213&view=revisionPatch
- http://websvn.kde.org/?view=revision&revision=1089241Patch
- http://websvn.kde.org/trunk/KDE/kdebase/workspace/krunner/lock/lockdlg.cc?r1=1089213&r2=1089212&pathrev=1089213
- http://www.kde.org/info/security/advisory-20100217-1.txt
- http://www.openwall.com/lists/oss-security/2010/02/17/3
- http://www.vupen.com/english/advisories/2010/0409Patch, Vendor Advisory
- https://bugs.kde.org/show_bug.cgi?id=217882
- https://bugzilla.novell.com/show_bug.cgi?id=579280
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.