VDB

GCVE-110-MAGEIA-2020-388

GCVE-110-MAGEIA-2020-388
Advisory Published
Vulnetix · Advisory published October 20, 2020
In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception. (CVE-2020-26117)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiatigervnc1.10.1-1.2.mga7 (unaffected), 0 (affected)—

Aliases

CVE-2020-26117

References

Updated tigervnc packages fix a security vulnerability
fix
Updated tigervnc packages fix a security vulnerability
advisory
Updated tigervnc packages fix a security vulnerability
advisory
Updated tigervnc packages fix a security vulnerability
issue
Updated tigervnc packages fix a security vulnerability
issue
Updated tigervnc packages fix a security vulnerability
issue

Browse GCVE Records

74,366 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›