CVE-2020-29074: High severity X11vnc Project X11vnc vulnerability
scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/x11vncto a version that resolves this vulnerability.Fixed in 0.9.13-6+deb10u1Fixed in 0.9.16-5 - Upgrade
Upgrade
debian/x11vncto a version that resolves this vulnerability.Fixed in 0.9.13-6+deb10u1Fixed in 0.9.16-7Fixed in 0.9.16-9 - Upgrade
Upgrade
alpine/x11vncto a version that resolves this vulnerability.Fixed in 0.9.16-r1 - Upgrade
Upgrade
alpine/x11vncto a version that resolves this vulnerability.Fixed in 0.9.16-r2 - Upgrade
Upgrade
ubuntu/x11vncto a version that resolves this vulnerability.Fixed in 0.9.16-3ubuntu0.1~esm2
Event History
Frequently Asked Questions
What is the severity of CVE-2020-29074?
CVE-2020-29074 is considered a high severity vulnerability due to the potential for unauthorized access by other users.
How do I fix CVE-2020-29074?
To fix CVE-2020-29074, upgrade to x11vnc version 0.9.16-7 or later on Debian-based systems.
Which versions of x11vnc are affected by CVE-2020-29074?
CVE-2020-29074 affects x11vnc versions up to and including 0.9.16-4.
What can attackers do if they exploit CVE-2020-29074?
If exploited, CVE-2020-29074 allows attackers to access shared memory segments, potentially compromising sensitive data.
Does CVE-2020-29074 affect all operating systems?
CVE-2020-29074 specifically affects certain versions of Debian and Fedora operating systems.