Important: kernel-livepatch-5.10.62-55.141

Issue Overview: A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access t...

CVE-2021-4002

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data...

UBUNTU-CVE-2021-4002

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data...

PT-2021-7327 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way a user maps some regions of memory twice using the shmget function, which are aligned to PUD...

Updated x11vnc package fixes a security vulnerability

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user. CVE-2020-29074...

Privilege Escalation

x11vnc is vulnerable to privilege escalation. The vulnerability exists through scan.c in IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

DEBIAN-CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

Design/Logic Flaw

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

CVE-2020-29074

CVE-2020-29074 affects x11vnc 0.9.16 where scan.c uses IPC_CREAT|0777 in shmget, enabling access by other users. Connected advisories (Fedora, Debian) confirm this vulnerability and reference x11vnc as the affected component. CVSS details show high impact (C/H/I/A) with network exposure and low a...

CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

CVE-2020-29074

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

CVE-2020-29074: Incorrect Permission Assignment for Critical Resource

scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user...

Libvnc X11vnc Security Vulnerabilities

Libvnc X11vnc is a software for Unix platforms used to connect to remote desktops by the Libvnc community. A security vulnerability exists in x11vnc version 0.9.16, which stems from scan.c's use of IPC CREAT|0777 in the shmget call, which allows access by participants other than the current user...

PT-2020-5810

Name of the Vulnerable Software and Affected Versions: x11vnc version 0.9.16 Description: The issue is related to the scan.c component of the X11vnc VNC server, which lacks an authorization mechanism. This allows a remote attacker to access confidential data, compromise its integrity, and cause a...

Amazon Linux AMI : kernel (ALAS-2017-814)

Possible double free in stcpsendmsg incorrect fix for CVE-2017-5986 : It was found that the code in net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service...