USN-4958-1
caribou vulnerability
No scoreFix available
It was discovered that the Caribou onscreen keyboard could be made to crash when given certain input values. An attacker could use this to bypass screen-locking applications that support using Caribou as an input mechanism.
What each source reports
OSV No score
caribou vulnerability
It was discovered that the Caribou onscreen keyboard could be made to crash when given certain input values. An attacker could use this to bypass screen-locking applications that support using Caribou as an input mechanism.
- Record
USN-4958-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
caribouUbuntu:20.04:LTS |
before 0.4.21-7ubuntu0.20.04.1, plus listed versions 0.4.21-7 |
0.4.21-7ubuntu0.20.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4958-1 is a vulnerability with no CVSS score yet in caribou, published May 17, 2021. No source lists public exploit code. Fixed in caribou 0.4.21-7ubuntu0.20.04.1.