VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 13, 2020· Updated Jun 17, 2026

CVE-2020-28638

CVE-2020-28638

Description

ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only pinentry-curses is found." as the encryption key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Dyne/Tomb
    cpe:2.3:a:dyne:tomb:*:*:*:*:*:*:*:*
    Range: >=2.0,<=2.7
  • Tomb/Tombdescription
  • Tomb/Tombllm-create
    Range: 2.0 - 2.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.