CVE-2011-1070

NameCVE-2011-1070
Descriptionv86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs619404

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
v86d (PTS)buster, bullseye0.1.10-1fixed
sid, trixie0.1.10-4fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
v86dsourcelenny0.1.5.2-1+lenny1
v86dsourcesqueeze0.1.9-1+squeeze1
v86dsource(unstable)0.1.10-1low619404

Search for package or bug name: Reporting problems