CVE-2017-2626

🗓️ 01 Mar 2017 00:48:10Reported by redhat.comType

Weak key generation in libICE can lead to session hijacking

Reporter	Title	Published	Views	Family All 74
0day.today	X.org Privilege Escalation / Use-After-Free / Weak Entropy Vulnerabilities	2 Mar 201700:00	–	zdt
AlpineLinux	CVE-2017-2626	27 Jul 201819:00	–	alpinelinux
BDU FSTEC	The vulnerability of the ICE data exchange library X11 libICE, related to the use of a weak entropy source for key generation, allows a hacker to intercept sessions.	5 Feb 201900:00	–	bdu_fstec
Tenable Nessus	CentOS 7 : libICE / libX11 / libXaw / libXcursor / libXdmcp / libXfixes / libXfont / libXfont2 / etc (CESA-2017:1865)	25 Aug 201700:00	–	nessus
Tenable Nessus	Debian DLA-2002-1 : libice security update	25 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : libXpm, libXdmcp, libICE (EulerOS-SA-2017-1211)	11 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libXpm, libXdmcp, libICE (EulerOS-SA-2017-1212)	11 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : libICE (EulerOS-SA-2020-1992)	29 Sep 202000:00	–	nessus
Tenable Nessus	Fedora 26 : libICE (2017-7ac378e011)	17 Jul 201700:00	–	nessus
Tenable Nessus	Fedora 25 : libICE (2017-c02eb668a7)	6 Mar 201700:00	–	nessus