CVE-2011-2187: Debian Linux

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Xscreensaver Project Xscreensaver: before 5.14 (fixed in 5.14)

Published 2019-11-27. Last modified 2026-06-16.