What’s Vulnerable › Vulnerabilities

CVE-2006-0061

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-11-06 · updated 2026-06-16
• Weakness: CWE-306

Description

xlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession. This allows unauthorized users access to the X session.

Affected products

• Sillycycle Xlockmore: 5.13, 5.22

References

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318123
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=399003
• https://security-tracker.debian.org/tracker/CVE-2006-0061
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318123
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=399003
• https://security-tracker.debian.org/tracker/CVE-2006-0061

Get alerted when CVE-2006-0061 or the next vulnerability affects your stack