5
CVSSv2

CVE-2021-3567

Published: 25/03/2022 Updated: 07/07/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnome caribou

Vendor Advisories

Caribou can be crashed by attempting to insert the character "ē" This issue has security implications for cinnamon-screensaver because a crash of caribou causes the screensaver to crash as well, making access to the session possible without providing the correct password ...