CVE-2011-1070

EPSS 0.13%
Published 14.11.2019 01:15:10
Last modified 21.11.2024 01:25:27
Source secalert@redhat.com
CVE-Watchlists
Login
Open
Login

v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

V86d Project ≫ V86d Version < 0.1.10

Debian ≫ Debian Linux Version8.0

Debian ≫ Debian Linux Version9.0

Debian ≫ Debian Linux Version10.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.13%	0.295

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://access.redhat.com/security/cve/cve-2011-1070

Third Party Advisory

Not Applicable

https://seclists.org/oss-sec/2011/q1/315

Third Party Advisory

Mailing List

https://security-tracker.debian.org/tracker/CVE-2011-1070

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2011-1070

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-1070

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-1070

EUVD