CVE-2020-13696

An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...

CVE-2020-13696

An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...

CVE-1999-1406

The CVE-1999-1406 issue concerns the dumpreg utility in Red Hat Linux 5.1, which opens /dev/mem with O_RDWR. The underlying effect is that a local user can crash the kernel by redirecting stdout (fd 1) to the kernel, enabling a denial of service. The available documents confirm the affected compo...