Debian/tigervnc: high 8.1
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certi
Action: Upgrade tigervnc to 1.10.1+dfsg-9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.10.1+dfsg-9 | - |
Fixed versions
| 1.10.1+dfsg-9 |
Sources
- osv: DEBIAN-CVE-2020-26117#Debian:14/tigervnc
- https://security-tracker.debian.org/tracker/CVE-2020-26117
published · modified · JSON