CVE-2021-31523: Xscreensaver Project Xscreensaver

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency.

Affected products

• Xscreensaver Project Xscreensaver: version 5.42+dfsg1-1 only

Published 2021-04-21. Last modified 2026-06-17.