A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to     bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from     this vulnerability is to system availability. (CVE-2021-3567)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1071-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2414-1 advisory.

  - A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to     bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from     this vulnerability is to system availability. (CVE-2021-3567)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2414-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2007-1 advisory.

  - A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to     bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from     this vulnerability is to system availability. (CVE-2021-3567)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1943-1 advisory.

  - A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to     bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from     this vulnerability is to system availability. (CVE-2021-3567)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
256179	Linux Distros Unpatched Vulnerability : CVE-2021-3567	Nessus	Misc.	high
151938	openSUSE 15 Security Update : caribou (openSUSE-SU-2021:1071-1)	Nessus	SuSE Local Security Checks	high
151881	SUSE SLED15 / SLES15 Security Update : caribou (SUSE-SU-2021:2414-1)	Nessus	SuSE Local Security Checks	high
151866	openSUSE 15 Security Update : caribou (openSUSE-SU-2021:2414-1)	Nessus	SuSE Local Security Checks	high
150873	SUSE SLES15 Security Update : caribou (SUSE-SU-2021:2007-1)	Nessus	SuSE Local Security Checks	high
150739	SUSE SLED12 / SLES12 Security Update : caribou (SUSE-SU-2021:1943-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2021-3567

high

Tenable Plugins

high

high

high

high

high

high