CVE-2015-8025
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency...
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
Exploit likelihood
What each source reports
NVD Score used
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
- Record
CVE-2015-8025- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
- Record
CVE-2015-8025- Updated
- 2026-11-02
EUVDEUVD-2015-7920 No score
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
- Record
EUVD-2015-7920- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gfx7-7vxh-f4g8 No score
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency...
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
- Record
GHSA-gfx7-7vxh-f4g8- Updated
- 2026-11-02
OSV No score
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
- Record
CVE-2015-8025- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-8025 No score
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
- Record
DEBIAN-CVE-2015-8025- Updated
- 2026-11-02
Show 6 moreShow less
OSVMGASA-2015-0431 No score
Updated xscreensaver package fixes security vulnerability
The updated xscreensaver packages fix a security issue when used, in some cases, with dual screen and unplugging one of them
- Record
MGASA-2015-0431- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10216-1 No score
xscreensaver-5.34-1.6 on GA media
These are all security issues fixed in the xscreensaver-5.34-1.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10216-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:2053-1 No score
Security update for xscreensaver
The xscreensaver package was updated to fix the following security issue:
- CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked (bsc#952062).
- Record
SUSE-SU-2015:2053-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:2053-2 No score
Security update for xscreensaver
The xscreensaver package was updated to fix the following security issue:
- CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked (bsc#952062).
- Record
SUSE-SU-2015:2053-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:2054-1 No score
Security update for xscreensaver
The xscreensaver package was updated to fix the following security and non security issues:
- CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked (bsc#952062).
- Added xscreensaver-in_signal_handler_p.patch needed for fix of signal handling.
- Refresh xscreensaver-stars.patch.
- Record
SUSE-SU-2015:2054-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-8025 No score
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
- Record
UBUNTU-CVE-2015-8025- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xscreensaverDebian:12 |
before 5.34-1 | 5.34-1 |
xscreensaverDebian:13 |
before 5.34-1 | 5.34-1 |
xscreensaverDebian:14 |
before 5.34-1 | 5.34-1 |
xscreensaverDebian:6.0 |
before 5.11-1+deb6u11, plus listed versions 5.11-1 |
5.11-1+deb6u11 |
xscreensaverDebian:7 |
before 5.15-3+deb7u1, plus listed versions 5.15-3 |
5.15-3+deb7u1 |
xscreensaverDebian:8 |
before 5.30-1+deb8u1, plus listed versions 5.30-1 |
5.30-1+deb8u1 |
xscreensaverMageia:5 |
before 5.34-2.mga5 | 5.34-2.mga5 |
xscreensaverSUSE:Linux Enterprise Desktop 12 |
before 5.22-7.1 | 5.22-7.1 |
xscreensaverSUSE:Linux Enterprise Server 12 |
before 5.22-7.1 | 5.22-7.1 |
xscreensaverSUSE:Linux Enterprise Server for SAP Applications 12 |
before 5.22-7.1 | 5.22-7.1 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xscreensaverSUSE:Linux Enterprise Desktop 12 SP1 |
before 5.22-7.1 | 5.22-7.1 |
xscreensaverSUSE:Linux Enterprise Server 12 SP1 |
before 5.22-7.1 | 5.22-7.1 |
xscreensaverSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 5.22-7.1 | 5.22-7.1 |
xscreensaverSUSE:Linux Enterprise Desktop 11 SP3 |
before 5.07-6.36.1 | 5.07-6.36.1 |
xscreensaverSUSE:Linux Enterprise Desktop 11 SP4 |
before 5.07-6.36.1 | 5.07-6.36.1 |
xscreensaverSUSE:Linux Enterprise Server 11 SP3 |
before 5.07-6.36.1 | 5.07-6.36.1 |
xscreensaverSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 5.07-6.36.1 | 5.07-6.36.1 |
xscreensaverSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 5.07-6.36.1 | 5.07-6.36.1 |
xscreensaverSUSE:Linux Enterprise Server 11 SP4 |
before 5.07-6.36.1 | 5.07-6.36.1 |
xscreensaverSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 5.07-6.36.1 | 5.07-6.36.1 |
xscreensaverUbuntu:14.04:LTS |
before 5.15-3+deb7u1ubuntu0.1, plus listed versions 5.15-3ubuntu1 |
5.15-3+deb7u1ubuntu0.1 |
xscreensaveropenSUSE:Tumbleweed |
before 5.34-1.6 | 5.34-1.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-8025 is a low vulnerability (CVSS 2.1) in Xscreensaver Project Xscreensaver, published October 29, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in xscreensaver 5.34-1.
References
jwz.org/blog/2015/10/xscreensaver-5-34
securitytracker.com/id/1034052
lists.opensuse.org/opensuse-updates/2015-11/msg00102.html
debian.org/security/2016/dsa-3438
oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
openwall.com/lists/oss-security/2015/10/24/2
Show 17 moreShow less
twitter.com/Thaolia/status/656823859304398848
ubuntu.com/usn/USN-2789-1
nvd.nist.gov/vuln/detail/CVE-2015-8025
github.com/advisories/GHSA-gfx7-7vxh-f4g8
security-tracker.debian.org/tracker/CVE-2015-8025
advisories.mageia.org/MGASA-2015-0431.html
bugs.mageia.org/show_bug.cgi?id=17012
suse.com/support/update/announcement/2015/suse-su-20152053-1
bugzilla.suse.com/952062
ubuntu.com/security/CVE-2015-8025
cve.org/CVERecord?id=CVE-2015-8025