Red Hat Security Advisory

RHSA-2021:1783

tigervnc security, bug fix, and enhancement update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) tigervnc-1.11.0-6.el8, tigervnc-icons-1.11.0-6.el8, tigervnc-license-1.11.0-6.el8 +4

TI-2020-15960 CVE-2020-26117 · GHSA-cx25-8g49-fx7q

MEDIUM 41

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0306 Published 2020-09-27 Partial fix CWE-295