EUVD-2020-5919

Malware in sbrugna...

The vulnerability of the dev_open() function in the software package for viewing television programs on PC LinuxTV Xawtv allows a intruder to gain unauthorized access to protected information.

The vulnerability of the devopen function in the PC LinuxTV Xawtv software package for viewing television programs is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

[SECURITY] [DLA 2246-1] xawtv security update

Package : xawtv Version : 3.103-3+deb8u1 CVE ID : CVE-2020-13696 Debian Bug : 962221 An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem...

DEBIAN-CVE-2020-13696

An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...

CVE-2020-13696: Incorrect Authorization

An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...