VulnerabilityModified
CVE-2011-1070
This could allow unprivileged users to manipulate the video mode and potentially other consequences.
HIGH 7.8EPSS 0.37%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.37%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.37% probability · 31th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-863
- Affected
- v86d project/v86d · debian/debian linux
- Source
- secalert@redhat.com
References
- https://access.redhat.com/security/cve/cve-2011-1070Not Applicable, Third Party Advisory
- https://seclists.org/oss-sec/2011/q1/315Mailing List, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-1070Third Party Advisory
- https://access.redhat.com/security/cve/cve-2011-1070Not Applicable, Third Party Advisory
- https://seclists.org/oss-sec/2011/q1/315Mailing List, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-1070Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.