BSD Portsx11vnc -- access to shared memory segments
· CVE-2020-29074 · VuXML entry
[email protected] reports: scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.
Affected versions
- x11vnc < 0.9.16_8
By system
0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | net/x11vnc | 0.9.16_8 | fixed | |
| OpenBSD | x11/x11vnc | 0.9.17p0 | out of range, by version | |
| NetBSD | x11/x11vnc | 0.9.17nb5 | not listed | |
| MidnightBSD | net/x11vnc | 0.9.17_1 | out of range, by version | |
| FreeBSD | net/x11vnc | 0.9.17 | fixed |