CVE-2006-0061: Sillycycle Xlockmore

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

xlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession. This allows unauthorized users access to the X session.

Affected products

  • Sillycycle Xlockmore: version 5.13 only; version 5.22 only

Published 2019-11-06. Last modified 2026-06-16.