CVEvulnerability
CVE-2011-1070
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-863
Description
v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.
Affected configurations
• v86d project v86d (< 0.1.10)
• debian debian linux 8.0
• debian debian linux 9.0
• debian debian linux 10.0
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://access.redhat.com/security/cve/cve-2011-1070 Not Applicable, Third Party Advisory
- https://seclists.org/oss-sec/2011/q1/315 Mailing List, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-1070 Third Party Advisory
- https://access.redhat.com/security/cve/cve-2011-1070 Not Applicable, Third Party Advisory
- https://seclists.org/oss-sec/2011/q1/315 Mailing List, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-1070 Third Party Advisory