Suckless

suckless

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-0842 2Debian Suckless 2Debian Linux Surf Nov 21, 2024 Nov 19, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 surf: cookie jar has read access from other local user
CVE-2016-6866 2Fedoraproject Suckless 2Fedora Slock May 13, 2026 Feb 15, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash.
CVE-2012-1620 1Suckless 1Slock Apr 29, 2026 Jul 12, 2012 N/A· v4 N/A· v3 3.6 LOW· v2 slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and ac...Show more slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows.Show less