USN-9089-1 — x11vnc vulnerability

Summary

It was discovered that x11vnc created shared memory segments with insecure
permissions. A local attacker could possibly use this issue to obtain
sensitive information or modify screen contents.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	x11vnc	0.9.16-3ubuntu0.1~esm2

Vulnerabilities 1

Unscored —

CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.

x11vnc x11vnc x11vnc Debian Ubuntu Alpine

Nov 25, 2020

References

report
https://ubuntu.com/security/CVE-2020-29074

x11vnc vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.

References