rpm package
suse/tigervnc&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP2
pkg:rpm/suse/tigervnc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-26117 | — | < 1.9.0-19.9.1 | 1.9.0-19.9.1 | Sep 27, 2020 | In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception. |
- CVE-2020-26117Sep 27, 2020affected < 1.9.0-19.9.1fixed 1.9.0-19.9.1
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception.