Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2016-6866
slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.005
EPSS Ranking
63.7%
CVSS Severity
CVSS v3 Score
7.5
CVSS v2 Score
5.0
References
http://git.suckless.org/slock/commit/?id=d8bec0f6fdc8a246d78cb488a0068954b46fcb29
http://s1m0n.dft-labs.eu/files/slock/slock.txt
http://www.openwall.com/lists/oss-security/2016/08/18/22
http://www.openwall.com/lists/oss-security/2016/08/18/24
http://www.securityfocus.com/bid/92546
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FYPV6QQPPYBL3Z2BYNYEJB67FSC55OR/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZPEJQNVODYSI4WQXM5GQKXRO7TPK2VG/
http://git.suckless.org/slock/commit/?id=d8bec0f6fdc8a246d78cb488a0068954b46fcb29
http://s1m0n.dft-labs.eu/files/slock/slock.txt
http://www.openwall.com/lists/oss-security/2016/08/18/22
http://www.openwall.com/lists/oss-security/2016/08/18/24
http://www.securityfocus.com/bid/92546
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FYPV6QQPPYBL3Z2BYNYEJB67FSC55OR/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZPEJQNVODYSI4WQXM5GQKXRO7TPK2VG/
Products affected by CVE-2016-6866
Suckless
»
Slock
»
Version:
0.9
cpe:2.3:a:suckless:slock:0.9
Suckless
»
Slock
»
Version:
1.0
cpe:2.3:a:suckless:slock:1.0
Suckless
»
Slock
»
Version:
1.3
cpe:2.3:a:suckless:slock:1.3
Fedoraproject
»
Fedora
»
Version:
24
cpe:2.3:o:fedoraproject:fedora:24
Fedoraproject
»
Fedora
»
Version:
25
cpe:2.3:o:fedoraproject:fedora:25
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved