1 matches found
MGASA-2017-0330 Updated libxdmcp packages fix security vulnerability
XDM uses weak entropy to generate the session keys on non BSD systems. On multi user systems it might possible to check the PID of the process and how long it is running to get an estimate of these values, which could allow an attacker to attach to the session of a different user CVE-2017-2625...
6.5CVSS6.6AI score0.00534EPSS
SaveExploits3References3
20