Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only pinentry-curses is found." as the encryption key.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dyne Tomb 授权问题漏洞
Vulnerability Description
Dyne Tomb是Dyne(DYNE)个人开发者的一个基于 Cryptsetup 和 LUKS 生成加密文件的加密软件。 Tomb 2.0版本至2.7版本存在安全漏洞,该漏洞源于当使用pinentry-curses并且$DISPLAY为非空时,ask password返回一个警告,导致受影响的用户的文件被加密,但只找到pinentry-curses作为加密密钥。
CVSS Information
N/A
Vulnerability Type
N/A