VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 13, 2020· Updated Jun 17, 2026

CVE-2020-28638

CVE-2020-28638

Description

ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only pinentry-curses is found." as the encryption key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Tomb/Tombcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 2.0 - 2.7
  • Dyne/Tomb
    cpe:2.3:a:dyne:tomb:*:*:*:*:*:*:*:*
    Range: >=2.0,<=2.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.