It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxdmcp | Aug 22, 2024 | Jul 27, 2018 |
| Centos_linux | — | Upgrade libX11-develUpgrade libXvMC-debuginfoUpgrade xcb-protoUpgrade libXtst-debuginfoUpgrade libXxf86vmUpgrade libwacom-develUpgrade libXtst-develUpgrade libXtUpgrade libXxf86vm-develUpgrade mesa-libgbmUpgrade libxkbcommon-develUpgrade libX11-debuginfoUpgrade mesa-libOSMesa-develUpgrade mesa-libxatracker-develUpgrade libX11-commonUpgrade libvdpau-debuginfoUpgrade libXfixes-develUpgrade libxcb-develUpgrade libvdpau-docsUpgrade libXtstUpgrade libXdmcp-develUpgrade libXrenderUpgrade libXvMCUpgrade libfontenc-debuginfoUpgrade libXt-develUpgrade libwacomUpgrade mesa-dri-driversUpgrade libXrender-develUpgrade libwacom-dataUpgrade libinput-develUpgrade libXpm-debuginfoUpgrade libinput-debuginfoUpgrade libXdmcpUpgrade xkeyboard-configUpgrade libXrandr-debuginfoUpgrade libICE-develUpgrade libXi-develUpgrade libXfontUpgrade libdrm-debuginfoUpgrade mesa-libxatrackerUpgrade libXv-debuginfoUpgrade libXawUpgrade libXfont2Upgrade libinputUpgrade libxkbfile-develUpgrade libfontenc-develUpgrade libXfont2-debuginfoUpgrade vulkanUpgrade libxkbfile-debuginfoUpgrade libXt-debuginfoUpgrade mesa-libGL-develUpgrade libxkbcommon-x11-develUpgrade vulkan-filesystemUpgrade libxcb-debuginfoUpgrade libfontencUpgrade vulkan-debuginfoUpgrade mesa-filesystemUpgrade libXrender-debuginfoUpgrade libvdpauUpgrade xkeyboard-config-develUpgrade libvdpau-develUpgrade drm-utilsUpgrade libevdevUpgrade libevdev-debuginfoUpgrade libXvUpgrade libepoxy-debuginfoUpgrade vulkan-develUpgrade libICE-debuginfoUpgrade mesa-libEGLUpgrade libxcbUpgrade libXpmUpgrade mesa-libOSMesaUpgrade mesa-private-llvmUpgrade libXiUpgrade libXcursor-develUpgrade libXfixes-debuginfoUpgrade libXcursor-debuginfoUpgrade mesa-private-llvm-debuginfoUpgrade libXfont-debuginfoUpgrade libxkbcommon-x11Upgrade libwacom-debuginfoUpgrade libXrandrUpgrade libxkbcommonUpgrade libXaw-debuginfoUpgrade libevdev-develUpgrade libXi-debuginfoUpgrade libXdmcp-debuginfoUpgrade libevdev-utilsUpgrade libICEUpgrade libdrm-develUpgrade libxcb-docUpgrade libdrmUpgrade mesa-libGLES-develUpgrade mesa-libglapiUpgrade mesa-private-llvm-develUpgrade mesa-libGLESUpgrade libXpm-develUpgrade libXfont2-develUpgrade mesa-debuginfoUpgrade mesa-libgbm-develUpgrade libepoxyUpgrade libxkbcommon-debuginfoUpgrade libepoxy-develUpgrade mesa-vulkan-driversUpgrade xorg-x11-proto-develUpgrade mesa-libEGL-develUpgrade libxkbfileUpgrade libXv-develUpgrade libXfixesUpgrade libX11Upgrade libXcursorUpgrade libXxf86vm-debuginfoUpgrade libXrandr-develUpgrade libXvMC-develUpgrade mesa-libGLUpgrade libXfont-develUpgrade libXaw-devel | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade libxdmcp | Nov 27, 2019 | Jul 27, 2018 |
| Freebsd | — | Upgrade libXdmcp | Apr 1, 2019 | Mar 21, 2019 |
| Gentoo Linux | — | Upgrade x11-libs/libXrender.Upgrade x11-libs/libXrandr.Upgrade x11-libs/libICE.Upgrade x11-libs/libXfixes.Upgrade x11-base/xorg-server.Upgrade x11-libs/libXdmcp.Upgrade x11-libs/libXi.Upgrade x11-libs/libXv. | Oct 30, 2017 | Apr 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade libxcbUpgrade libXfont2Upgrade mesa-dri-driversUpgrade libX11-develUpgrade mesa-vulkan-driversUpgrade libwacom-dataUpgrade libXaw-develUpgrade mesa-private-llvmUpgrade libinputUpgrade libvdpau-docsUpgrade libXvMCUpgrade libXdmcpUpgrade libXfont2-develUpgrade mesa-libglapiUpgrade libdrm-develUpgrade libXpm-develUpgrade libXxf86vmUpgrade mesa-private-llvm-develUpgrade libxkbcommonUpgrade libxkbfile-develUpgrade drm-utilsUpgrade xkeyboard-configUpgrade libxkbcommon-develUpgrade libXvUpgrade libXtstUpgrade xcb-protoUpgrade libXt-develUpgrade mesa-libxatracker-develUpgrade libxkbfileUpgrade libxcb-develUpgrade libXcursor-develUpgrade libepoxyUpgrade libdrmUpgrade libXrandr-develUpgrade libevdev-utilsUpgrade libevdevUpgrade mesa-libxatrackerUpgrade mesa-libGLESUpgrade libfontenc-develUpgrade libXrandrUpgrade libXfixesUpgrade libXvMC-develUpgrade libinput-develUpgrade libfontencUpgrade libXdmcp-develUpgrade libevdev-develUpgrade libxkbcommon-x11Upgrade libwacom-develUpgrade libICE-develUpgrade libXfixes-develUpgrade libICEUpgrade libXv-develUpgrade libXpmUpgrade libvdpau-develUpgrade mesa-libGLUpgrade libvdpauUpgrade libXxf86vm-develUpgrade mesa-libGL-develUpgrade libXiUpgrade libXfont-develUpgrade vulkan-filesystemUpgrade xkeyboard-config-develUpgrade libXrenderUpgrade libxcb-docUpgrade vulkan-develUpgrade mesa-filesystemUpgrade libXi-develUpgrade libXawUpgrade mesa-libOSMesa-develUpgrade libXfontUpgrade mesa-libGLES-develUpgrade vulkanUpgrade libwacomUpgrade mesa-libEGLUpgrade libXtUpgrade mesa-libEGL-develUpgrade libX11-commonUpgrade libepoxy-develUpgrade libXrender-develUpgrade xorg-x11-proto-develUpgrade mesa-libgbm-develUpgrade libXcursorUpgrade libXtst-develUpgrade mesa-libgbmUpgrade libX11Upgrade mesa-libOSMesaUpgrade libxkbcommon-x11-devel | Aug 8, 2017 | Feb 28, 2017 |
| Redhat_linux | — | Upgrade libXv-debuginfoUpgrade libevdev-utilsUpgrade mesa-libGLESUpgrade libwacom-dataUpgrade libXfont-debuginfoUpgrade mesa-libGLUpgrade libxkbcommon-develUpgrade libXxf86vmUpgrade libvdpau-docsUpgrade libevdev-debuginfoUpgrade libXt-develUpgrade libXfixes-debuginfoUpgrade libXcursor-develUpgrade libXtst-develUpgrade mesa-libglapiUpgrade libXtstUpgrade libICE-develUpgrade libxcbUpgrade mesa-private-llvm-develUpgrade libXvUpgrade mesa-libEGL-develUpgrade vulkanUpgrade libXiUpgrade libXpm-debuginfoUpgrade libXpm-develUpgrade libXdmcp-develUpgrade libxkbfile-debuginfoUpgrade libXaw-develUpgrade xkeyboard-configUpgrade libxcb-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libxatracker-develUpgrade libxkbfile-develUpgrade libfontenc-develUpgrade libvdpau-debuginfoUpgrade mesa-private-llvmUpgrade libxkbfileUpgrade mesa-libGLES-develUpgrade libxcb-develUpgrade libwacom-debuginfoUpgrade libXrandrUpgrade libepoxyUpgrade libX11-develUpgrade libxcb-docUpgrade libinput-develUpgrade mesa-libxatrackerUpgrade libXvMCUpgrade libxkbcommonUpgrade libxkbcommon-debuginfoUpgrade libXcursor-debuginfoUpgrade libXdmcp-debuginfoUpgrade libinputUpgrade libevdevUpgrade libXdmcpUpgrade mesa-vulkan-driversUpgrade drm-utilsUpgrade libfontenc-debuginfoUpgrade libXv-develUpgrade libXfont2Upgrade libdrm-develUpgrade libinput-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libOSMesaUpgrade libXfontUpgrade libdrm-debuginfoUpgrade libXrenderUpgrade mesa-debuginfoUpgrade libXi-debuginfoUpgrade libXrandr-debuginfoUpgrade libXrender-develUpgrade libXtUpgrade xcb-protoUpgrade libXawUpgrade libXvMC-develUpgrade libXfont-develUpgrade xkeyboard-config-develUpgrade mesa-libgbm-develUpgrade libevdev-develUpgrade libvdpauUpgrade vulkan-filesystemUpgrade libXfont2-develUpgrade libdrmUpgrade libvdpau-develUpgrade libXfixes-develUpgrade libXt-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-proto-develUpgrade mesa-libEGLUpgrade libXpmUpgrade libXrender-debuginfoUpgrade libXvMC-debuginfoUpgrade libfontencUpgrade libX11-commonUpgrade libXxf86vm-develNo solution existsUpgrade libwacom-develUpgrade libxkbcommon-x11-develUpgrade mesa-libGL-develUpgrade libXaw-debuginfoUpgrade libICEUpgrade mesa-private-llvm-debuginfoUpgrade libwacomUpgrade libXcursorUpgrade mesa-libgbmUpgrade vulkan-debuginfoUpgrade libepoxy-develUpgrade libXtst-debuginfoUpgrade libXfont2-debuginfoUpgrade libxkbcommon-x11Upgrade libXi-develUpgrade libXfixesUpgrade libXxf86vm-debuginfoUpgrade libepoxy-debuginfoUpgrade vulkan-develUpgrade libICE-debuginfoUpgrade libXrandr-develUpgrade libX11Upgrade mesa-filesystem | Aug 5, 2017 | Jul 6, 2017 |
| Suse | — | Upgrade xorg-x11-libXdmcp-develUpgrade xorg-x11-libXdmcpUpgrade xorg-x11-libXdmcp-32bitUpgrade libXdmcp6-32bitUpgrade xorg-x11-libXdmcp-devel-32bitUpgrade libXdmcp6Upgrade xorg-x11-libXdmcp-x86Upgrade libXdmcp-devel | Jul 6, 2017 | Jul 6, 2017 |
| Ubuntu | — | Upgrade libxdmcp6 (Ubuntu Pro) | Oct 20, 2022 | Jul 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub