CVE-2012-0064

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-10 · updated 2026-06-16
Weakness: CWE-264

Description

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

Affected products

X.Org X11: through 7.5; 1.0, 3.0, 4.0, 5.0, 6.0, 6.1 (+15)
Xkeyboard Config Project Xkeyboard-Config: through 2.4; 2.0, 2.1, 2.2, 2.3

References

http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/
http://lists.x.org/archives/xorg-announce/2012-January/001797.html
http://lists.x.org/archives/xorg-devel/2012-January/028691.html
http://securitytracker.com/id?1026549
http://who-t.blogspot.com/2012/01/xkb-breaking-grabs-cve-2012-0064.html
http://www.openwall.com/lists/oss-security/2012/01/19/6
http://www.osvdb.org/78445
http://www.x.org/wiki/Development/Security/
https://bugzilla.redhat.com/show_bug.cgi?id=783039
http://gu1.aeroxteam.fr/2012/01/19/bypass-screensaver-locker-program-xorg-111-and-up/
http://lists.x.org/archives/xorg-announce/2012-January/001797.html
http://lists.x.org/archives/xorg-devel/2012-January/028691.html

Get alerted when CVE-2012-0064 or the next vulnerability affects your stack