CVE:CVE-2015-8025
CNNVD:CNNVD-201511-157
XScreenSaver是一套基于X Window系统的屏幕保护程序。
XScreenSaver 5.34之前版本的driver/subprocs.c文件中存在安全漏洞，该漏洞源于程序没有正确执行内部一致性检查。物理位置临近的攻击者可借助热拔插监控程序利用该漏洞绕过锁屏。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04; Upgrade xscreensaver_project xscreensaver to a higher version than 5.33,and avoid the version 5.33