CVE-2020-29074
Summary
| CVE | CVE-2020-29074 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-11-25 23:15:00 UTC |
| Updated | 2023-11-07 03:21:00 UTC |
| Description | scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 33 Update: x11vnc-0.9.16-5.fc33 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] [DLA 2490-1] x11vnc security update |
MLIST |
lists.debian.org |
|
| scan: limit access to shared memory segments to current user · LibVNC/x11vnc@69eeb9f · GitHub |
MISC |
github.com |
Patch, Third Party Advisory |
| [SECURITY] Fedora 34 Update: x11vnc-0.9.16-6.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 32 Update: x11vnc-0.9.16-3.fc32 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 32 Update: x11vnc-0.9.16-3.fc32 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| Debian -- Security Information -- DSA-4799-1 x11vnc |
DEBIAN |
www.debian.org |
Third Party Advisory |
| [SECURITY] Fedora 33 Update: x11vnc-0.9.16-5.fc33 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 34 Update: x11vnc-0.9.16-6.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 281569 Fedora Security Update for x11vnc (FEDORA-2021-c5b679877e)
- 281570 Fedora Security Update for x11vnc (FEDORA-2021-93911302d6)
- 281571 Fedora Security Update for x11vnc (FEDORA-2021-069c0c3950)
- 501331 Alpine Linux Security Update for x11vnc
- 501722 Alpine Linux Security Update for x11vnc
- 505576 Alpine Linux Security Update for x11vnc