CVE-2020-26117
Fixed in a distro release EPSS 3%
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception.
Products: tigervnc, debian_linux, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tigervnc | 1.10.1+dfsg-9 |
| Debian 13 | tigervnc | 1.10.1+dfsg-9 |
| Debian 14 | tigervnc | 1.10.1+dfsg-9 |
| Debian 9 | tigervnc | 1.7.0+dfsg-7+deb9u2 |
| Red Hat Enterprise Linux 8 | tigervnc | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-debuginfo | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-debugsource | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-icons | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-license | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-selinux | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-server | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-debuginfo | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-minimal | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-minimal-debuginfo | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-module | 0:1.11.0-6.el8 |
| Red Hat Enterprise Linux 8 | tigervnc-server-module-debuginfo | 0:1.11.0-6.el8 |
| Rocky Linux 8 | tigervnc | 0:1.11.0-6.el8 |
| SUSE Enterprise Storage 5 | tigervnc | 1.6.0-27.1 |
| SUSE HPE Helion OpenStack 8 | tigervnc | 1.6.0-27.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | tigervnc | 1.8.0-13.14.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | tigervnc | 1.8.0-13.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | tigervnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | tigervnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | tigervnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP2 | tigervnc | 1.9.0-19.9.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | tigervnc | 1.6.0-27.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | tigervnc | 1.6.0-27.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | tigervnc | 1.6.0-27.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | tigervnc | 1.6.0-27.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | tigervnc | 1.6.0-22.17.1 |
| SUSE Linux Enterprise Server 12 SP5 | tigervnc | 1.6.0-22.17.1 |
| SUSE Linux Enterprise Server 15-LTSS | tigervnc | 1.8.0-13.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | tigervnc | 1.6.0-27.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | tigervnc | 1.6.0-27.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | tigervnc | 1.6.0-22.17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | tigervnc | 1.6.0-22.17.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | tigervnc | 1.8.0-13.14.1 |
| SUSE OpenStack Cloud 7 | tigervnc | 1.6.0-27.1 |
| SUSE OpenStack Cloud 8 | tigervnc | 1.6.0-27.1 |
| SUSE OpenStack Cloud 9 | tigervnc | 1.6.0-22.17.1 |
| SUSE OpenStack Cloud Crowbar 8 | tigervnc | 1.6.0-27.1 |
| SUSE OpenStack Cloud Crowbar 9 | tigervnc | 1.6.0-22.17.1 |
| Ubuntu 18.04 LTS | tigervnc | no fix |
| Ubuntu Pro 20.04 LTS | tigervnc | 1.10.1+dfsg-3ubuntu0.1+esm2 |
| openSUSE Leap 15.1 | tigervnc | 1.9.0-lp151.4.9.1 |
| openSUSE Leap 15.2 | tigervnc | 1.9.0-lp152.7.3.1 |
| openSUSE Tumbleweed | tigervnc | 1.10.1-17.1 |