X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| X.org-xserver | X | * | 1.13.3 (including) |
| X.org-xserver | X | 1.4.0 (including) | 1.4.0 (including) |