SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

x11vnc: wrong permissions to shared memory (CVE-2020-29074)

ID: oval:org.secpod.oval:def:1802037	Date: (C)2022-03-25 (M)2023-11-10
Class: PATCH	Family: unix

scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.

Platform:

Alpine Linux 3.12

Alpine Linux 3.13

Alpine Linux 3.14

Alpine Linux 3.15

Product:

x11vnc

Reference:

12173