Skip to content
5.2 Medium

CVE-2017-2626 It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys

Description

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.

Affected products and versions

Product Affected versions Fixed in
libICE 1.0.9-8 No fix stated
Track this CVE