Summary
It was discovered that TigerVNC mishandled TLS certificate exceptions. An
attacker could use this vulnerability to impersonate any server after a client
had added an exception and obtain sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | tigervnc | 1.10.1+dfsg-3ubuntu0.1+esm2 |
Vulnerabilities 1
-
Unscored —
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptio…
References
-
report
https://ubuntu.com/security/CVE-2020-26117