FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

x11vnc -- access to shared memory segments

Affected packages
x11vnc < 0.9.16_8

Details

VuXML ID 305ceb2c-9df8-11ef-a660-d85ed309193e
Discovery 2020-11-18
Entry 2024-11-08

cve@mitre.org reports:

scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.

References

CVE Name CVE-2020-29074
URL https://nvd.nist.gov/vuln/detail/CVE-2020-29074