CVE-2017-11171

Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...

CVE-2017-11171

The CVE-2017-11171 issue affects gnome-session (older builds up to 2.29.92) with a vulnerability in gsm-xsmp-server.c inside accept_ice_connection(). A local attacker can establish ICE connections using invalid authentication data (invalid magic cookie). Each failed attempt leaks a file descripto...

PT-2017-11795

Name of the Vulnerable Software and Affected Versions gnome-session versions prior to 2.29.92 Description A local attacker can exploit bad reference counting in the accept ice connection function to establish ICE connections with invalid authentication data, specifically an invalid magic cookie...