Lucene search
PRIOn knowledge basePRION:CVE-2017-2626HistoryJul 27, 2018 - 7:29 p.m.
Session fixation
2018-07-2719:29:00
PRIOn knowledge base
www.prio-n.com
6
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
References
www.openwall.com/lists/oss-security/2019/07/14/3
www.securityfocus.com/bid/96480
www.securitytracker.com/id/1037919
access.redhat.com/errata/RHSA-2017:1865
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2626
cgit.freedesktop.org/xorg/lib/libICE/commit/?id=ff5e59f32255913bb1cdf51441b98c9107ae165b
lists.debian.org/debian-lts-announce/2019/11/msg00022.html
security.gentoo.org/glsa/201704-03
www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/
Related
nessus
nessus
Fedora 24 : libICE (2017-d068b54614)
2017-03-06 00:00:00
EulerOS Virtualization for ARM 64 3.0.6.0 : libICE (EulerOS-SA-2020-1992)
2020-09-29 00:00:00
Debian DLA-2002-1 : libice security update
2019-11-25 00:00:00
ibm
ibm
nvd
nvd
CVE-2017-2626
2018-07-27 19:29:00
fedora
fedora
[SECURITY] Fedora 25 Update: libICE-1.0.9-8.fc25
2017-03-03 21:51:59
[SECURITY] Fedora 24 Update: libICE-1.0.9-8.fc24
2017-03-05 20:52:56
[SECURITY] Fedora 26 Update: libICE-1.0.9-8.fc26
2017-04-01 17:55:43
redhatcve
redhatcve
CVE-2017-2626
2017-03-01 00:48:10
cvelist
cvelist
CVE-2017-2626
2018-07-27 19:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libICE (EulerOS-SA-2020-1992)
2020-09-29 00:00:00
Fedora Update for libICE FEDORA-2017-d068b54614
2017-03-07 00:00:00
Fedora Update for libICE FEDORA-2017-c02eb668a7
2017-03-04 00:00:00
mageia
mageia
Updated libice packages fix security vulnerability
2017-08-25 23:35:54
ubuntu
ubuntu
libICE vulnerability
2022-11-28 00:00:00
osv
osv
CVE-2017-2626
2018-07-27 19:29:00
libice - security update
2019-11-23 00:00:00
libice vulnerability
2022-11-28 06:42:37
debiancve
debiancve
CVE-2017-2626
2018-07-27 19:29:00
ubuntucve
ubuntucve
CVE-2017-2626
2018-07-27 00:00:00
alpinelinux
alpinelinux
CVE-2017-2626
2018-07-27 19:29:00
cloudfoundry
cloudfoundry
USN-5744-1: libICE vulnerability | Cloud Foundry
2022-12-07 00:00:00
cve
cve
CVE-2017-2626
2018-07-27 19:29:00
debian
debian
[SECURITY] [DLA 2002-1] libice security update
2019-11-23 19:04:18
packetstorm
packetstorm
X.org Privilege Escalation / Use-After-Free / Weak Entropy
2017-03-01 00:00:00
zdt
zdt
X.org Privilege Escalation / Use-After-Free / Weak Entropy Vulnerabilities
2017-03-02 00:00:00
redhat
redhat
oraclelinux
oraclelinux
X.org X11 libraries security, bug fix and enhancement update
2017-08-07 00:00:00
gentoo
gentoo
X.Org: Multiple vulnerabilities
2017-04-10 00:00:00