Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-28638

Опубликовано: 13 нояб. 2020
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only pinentry-curses is found." as the encryption key.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dyne:tomb:*:*:*:*:*:*:*:*
Версия от 2.0 (включая) до 2.7 (включая)

EPSS

Процентиль: 42%
0.00197
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

ubuntu логотип

CVE-2020-28638

CVSS3: 9.8
ubuntu
около 5 лет назад

ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only pinentry-curses is found." as the encryption key.

debian логотип

CVE-2020-28638

CVSS3: 9.8
debian
около 5 лет назад

ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-c ...

github логотип

GHSA-7796-9c37-q364

github
больше 3 лет назад

ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only pinentry-curses is found." as the encryption key.

EPSS

Процентиль: 42%
0.00197
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287