CVE-2020-26117 — Improper Certificate Validation in Tigervnc

CWE-295 — Improper Certificate ValidationCWE-296 — Improper Following of a Certificate's Chain of Trust8 documents8 sources
Severity
8.1HIGHNVD
EPSS
0.7%
top 28.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
TigervncDebian LinuxOpensuse Leap
Timeline
PublishedSep 27
Latest updateMar 21

Description

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages3 packages

▶NVDtigervnc/tigervnc< 1.11.0
▶Debiantigervnc/tigervnc< 1.10.1+dfsg-9+3
▶NVDopensuse/leap15.2

Also affects: Debian Linux 9.0

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-cx25-8g49-fx7q: In rfb/CSecurityTLS↗2022-05-24
▶
OSV
CVE-2020-26117: In rfb/CSecurityTLS↗2020-09-27
▶
CVEList
CVE-2020-26117: In rfb/CSecurityTLS↗2020-09-27
▶

📋Vendor Advisories

3
Ubuntu
TigerVNC vulnerability↗2023-03-21
▶
Red Hat
tigervnc: certificate exceptions stored as authorities↗2020-09-18
▶
Debian
CVE-2020-26117: tigervnc - In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, vie...↗2020
▶

💬Community

1
Bugzilla
CVE-2020-26117 tigervnc: certificate exceptions stored as authorities↗2020-09-25
▶
CVE-2020-26117 — Improper Certificate Validation | cvebase