6.5
Moyenne
CVE-2017-2625 It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys
Description
It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libXdmcp | 1.1.2 | Pas de correctif indiqué |
Références
- GLSA-201704-03 security.gentoo.org
- bugzilla.redhat.com bugzilla.redhat.com
- RHSA-2017:1865 access.redhat.com
- 1037919 www.securitytracker.com
- cgit.freedesktop.org cgit.freedesktop.org
- 96480 www.securityfocus.com
- www.x41-dsec.de www.x41-dsec.de
- [debian-lts-announce] 20191125 [SECURITY] [DLA 2006-1] libxdmcp security update lists.debian.org
Chronologie
- Publiée
- Dernière modification