Lucene search
GoogleOSV:CVE-2017-2626HistoryJul 27, 2018 - 7:29 p.m.
CVE-2017-2626
2018-07-2719:29:00
Google
osv.dev
11
0.0004 Low
EPSS
Percentile
5.1%
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
References
www.openwall.com/lists/oss-security/2019/07/14/3
www.securityfocus.com/bid/96480
www.securitytracker.com/id/1037919
access.redhat.com/errata/RHSA-2017:1865
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2626
cgit.freedesktop.org/xorg/lib/libICE/commit/?id=ff5e59f32255913bb1cdf51441b98c9107ae165b
lists.debian.org/debian-lts-announce/2019/11/msg00022.html
security.gentoo.org/glsa/201704-03
www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/
Related
nessus
nessus
Fedora 25 : libICE (2017-c02eb668a7)
2017-03-06 00:00:00
RHEL 5 : libice (Unpatched Vulnerability)
2024-05-11 00:00:00
Debian DLA-2002-1 : libice security update
2019-11-25 00:00:00
openvas
openvas
Fedora Update for libICE FEDORA-2017-d068b54614
2017-03-07 00:00:00
Fedora Update for libICE FEDORA-2017-c02eb668a7
2017-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1835-1)
2021-04-19 00:00:00
mageia
mageia
Updated libice packages fix security vulnerability
2017-08-25 23:35:54
ubuntu
ubuntu
libICE vulnerability
2022-11-28 00:00:00
debiancve
debiancve
CVE-2017-2626
2018-07-27 19:29:00
ubuntucve
ubuntucve
CVE-2017-2626
2018-07-27 00:00:00
prion
prion
Session fixation
2018-07-27 19:29:00
fedora
fedora
[SECURITY] Fedora 24 Update: libICE-1.0.9-8.fc24
2017-03-05 20:52:56
[SECURITY] Fedora 25 Update: libICE-1.0.9-8.fc25
2017-03-03 21:51:59
[SECURITY] Fedora 26 Update: libICE-1.0.9-8.fc26
2017-04-01 17:55:43
redhatcve
redhatcve
CVE-2017-2626
2017-03-01 00:48:10
nvd
nvd
CVE-2017-2626
2018-07-27 19:29:00
ibm
ibm
cvelist
cvelist
CVE-2017-2626
2018-07-27 19:00:00
cloudfoundry
cloudfoundry
USN-5744-1: libICE vulnerability | Cloud Foundry
2022-12-07 00:00:00
alpinelinux
alpinelinux
CVE-2017-2626
2018-07-27 19:29:00
osv
osv
libice - security update
2019-11-23 00:00:00
libice vulnerability
2022-11-28 06:42:37
cve
cve
CVE-2017-2626
2018-07-27 19:29:00
debian
debian
[SECURITY] [DLA 2002-1] libice security update
2019-11-23 19:04:18
zdt
zdt
X.org Privilege Escalation / Use-After-Free / Weak Entropy Vulnerabilities
2017-03-02 00:00:00
packetstorm
packetstorm
X.org Privilege Escalation / Use-After-Free / Weak Entropy
2017-03-01 00:00:00
redhat
redhat
oraclelinux
oraclelinux
X.org X11 libraries security, bug fix and enhancement update
2017-08-07 00:00:00
gentoo
gentoo
X.Org: Multiple vulnerabilities
2017-04-10 00:00:00