Lucene search
PRIOn knowledge basePRION:CVE-2017-2626HistoryJul 27, 2018 - 7:29 p.m.
Session fixation
2018-07-2719:29:00
PRIOn knowledge base
www.prio-n.com
7
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
References
www.openwall.com/lists/oss-security/2019/07/14/3
www.securityfocus.com/bid/96480
www.securitytracker.com/id/1037919
access.redhat.com/errata/RHSA-2017:1865
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2626
cgit.freedesktop.org/xorg/lib/libICE/commit/?id=ff5e59f32255913bb1cdf51441b98c9107ae165b
lists.debian.org/debian-lts-announce/2019/11/msg00022.html
security.gentoo.org/glsa/201704-03
www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/
Related
nessus
nessus
RHEL 5 : libice (Unpatched Vulnerability)
2024-06-03 00:00:00
Fedora 26 : libICE (2017-7ac378e011)
2017-07-17 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS : libICE vulnerability (USN-5744-1)
2022-11-28 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: libICE-1.0.9-8.fc24
2017-03-05 20:52:56
[SECURITY] Fedora 26 Update: libICE-1.0.9-8.fc26
2017-04-01 17:55:43
[SECURITY] Fedora 25 Update: libICE-1.0.9-8.fc25
2017-03-03 21:51:59
openvas
openvas
Huawei EulerOS: Security Advisory for libICE (EulerOS-SA-2020-1992)
2020-09-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1848-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-2002-1)
2019-11-26 00:00:00
debian
debian
[SECURITY] [DLA 2002-1] libice security update
2019-11-23 19:04:18
osv
osv
libice vulnerability
2022-11-28 06:42:37
libice - security update
2019-11-23 00:00:00
CVE-2017-2626
2018-07-27 19:29:00
nvd
nvd
CVE-2017-2626
2018-07-27 19:29:00
redhatcve
redhatcve
CVE-2017-2626
2017-03-01 00:48:10
ibm
ibm
cvelist
cvelist
CVE-2017-2626
2018-07-27 19:00:00
cve
cve
CVE-2017-2626
2018-07-27 19:29:00
cloudfoundry
cloudfoundry
USN-5744-1: libICE vulnerability | Cloud Foundry
2022-12-07 00:00:00
alpinelinux
alpinelinux
CVE-2017-2626
2018-07-27 19:29:00
mageia
mageia
Updated libice packages fix security vulnerability
2017-08-25 23:35:54
debiancve
debiancve
CVE-2017-2626
2018-07-27 19:29:00
ubuntu
ubuntu
libICE vulnerability
2022-11-28 00:00:00
ubuntucve
ubuntucve
CVE-2017-2626
2018-07-27 00:00:00
packetstorm
packetstorm
X.org Privilege Escalation / Use-After-Free / Weak Entropy
2017-03-01 00:00:00
redhat
redhat
zdt
zdt
X.org Privilege Escalation / Use-After-Free / Weak Entropy Vulnerabilities
2017-03-02 00:00:00
oraclelinux
oraclelinux
X.org X11 libraries security, bug fix and enhancement update
2017-08-07 00:00:00
gentoo
gentoo
X.Org: Multiple vulnerabilities
2017-04-10 00:00:00