---

CVE-2021-3567 - log back

CVE-2021-3567 created at 30 May 2021 21:39:20
Severity	+ Medium
Remote	+ Local
Type	+ Authentication bypass
Description	+ Caribou can be crashed by attempting to insert the character "ē". This issue has security implications for cinnamon-screensaver because a crash of caribou causes the screensaver to crash as well, making access to the session possible without providing the correct password.
References	+ https://bugs.launchpad.net/ubuntu/+source/caribou/+bug/1912060 + https://gitlab.gnome.org/GNOME/caribou/-/merge_requests/3 + https://gitlab.gnome.org/GNOME/caribou/-/commit/d41c8e44b12222a290eaca16703406b113a630c6
Notes