CVE:CVE-2020-13696
CNNVD:CNNVD-202006-599
LinuxTV xawtv是LinuxTV社区的一套用于使用电视调谐器或电视观看和录制电视和网络摄像头的软件。
LinuxTV xawtv 3.107之前版本中的v4l-conf.c文件的‘dev_open()’函数存在安全漏洞，该漏洞源于程序缺乏充分的验证。本地攻击者可通过访问v4l-conf setuid-root程序利用该漏洞测试所存在文件并打开任意文件。
solution:Upgrade linuxtv xawtv to a higher version than 3.107,and avoid the version (,3.107); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade canonical ubuntu_linux to a higher version than 16.04,and avoid the version 16.04