CVE-2011-1070

HIGH 7.8CVE-2011-1070 · Published 14/11/2019 · updated 16/06/2026

In short

CVE-2011-1070 is a HIGH (CVSS 7.8) vulnerability affecting v86d (v86d project).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 31.3% of all vulnerabilities.
Fix: update to 0.1.10 or later.

Package	Affected versions	Patched versions
v86d v86d_project	`< 0.1.10`	`0.1.10`

Description

v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.

References

access.redhat.com/security/cve/cve-2011-1070 · Not Applicable
seclists.org/oss-sec/2011/q1/315 · Mailing List
security-tracker.debian.org/tracker/CVE-2011-1070 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free