PT-2017-3759 · X.Org+5 · Libice+5
Publicado
2017-04-04
·
Atualizado
2024-06-15
·
CVE-2017-2626
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
libICE versions prior to 1.0.9-8
Description:
The issue is related to the use of weak entropy for key generation in libICE. A local attacker could potentially exploit this flaw to hijack sessions using information available from the process list.
Recommendations:
For versions prior to 1.0.9-8, update to version 1.0.9-8 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive session information to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Suse
Ubuntu
Libice