CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency.

• CWE-269

• http://www.openwall.com/lists/oss-security/2021/04/21/3Mailing List, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2021/04/17/1Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/04/21/3Mailing List, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2021/04/17/1Mailing List, Patch, Third Party Advisory

Published

Apr 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31518Trend Micro Home Network Security 6.5.599 and earlier is vul…7.5
• CVE-2021-31519An incorrect permission vulnerability in the product install…7.3
• CVE-2021-3152Home Assistant before 2021.1.3 does not have a protection la…5.3
• CVE-2021-31520A weak session token authentication bypass vulnerability in …8.1
• CVE-2021-31521Trend Micro InterScan Web Security Virtual Appliance version…5.4
• CVE-2021-31522Kylin can receive user input and load any class through Clas…9.8
• CVE-2021-31525net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allow…5.9
• CVE-2021-3153HashiCorp Terraform Enterprise up to v202102-2 failed to enf…6.5
• CVE-2021-31530Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulne…7.5
• CVE-2021-31531Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulne…9.8
• CVE-2021-31532NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silic…6.8
• CVE-2021-31535LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7…9.8