It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libice | Aug 22, 2024 | Jul 27, 2018 |
| Centos_linux | — | Upgrade libX11-debuginfoUpgrade libxkbcommon-x11Upgrade mesa-vulkan-driversUpgrade libXrandr-develUpgrade libvdpau-develUpgrade mesa-private-llvm-debuginfoUpgrade libvdpau-docsUpgrade mesa-libOSMesa-develUpgrade mesa-filesystemUpgrade libdrm-develUpgrade libXpmUpgrade libXawUpgrade libXfixes-debuginfoUpgrade libXvMC-develUpgrade libXrandrUpgrade mesa-libgbmUpgrade libXiUpgrade xcb-protoUpgrade libXfontUpgrade vulkan-debuginfoUpgrade mesa-libGL-develUpgrade libXtstUpgrade mesa-debuginfoUpgrade mesa-dri-driversUpgrade libfontenc-develUpgrade libXi-debuginfoUpgrade libXdmcp-develUpgrade libXxf86vm-debuginfoUpgrade vulkan-filesystemUpgrade libevdevUpgrade vulkan-develUpgrade libxkbcommon-develUpgrade xorg-x11-proto-develUpgrade libXfont2-develUpgrade libxcbUpgrade libX11-commonUpgrade libdrmUpgrade libepoxy-debuginfoUpgrade drm-utilsUpgrade mesa-libgbm-develUpgrade libXfont2-debuginfoUpgrade libXtst-debuginfoUpgrade libdrm-debuginfoUpgrade libevdev-utilsUpgrade libepoxyUpgrade libvdpau-debuginfoUpgrade libXaw-debuginfoUpgrade libinput-debuginfoUpgrade xkeyboard-configUpgrade libXv-develUpgrade libICE-debuginfoUpgrade libXfont-debuginfoUpgrade libXvUpgrade libwacom-develUpgrade mesa-libOSMesaUpgrade libXfont-develUpgrade libXvMCUpgrade mesa-libxatrackerUpgrade libXcursorUpgrade libICE-develUpgrade libXpm-develUpgrade libvdpauUpgrade libXvMC-debuginfoUpgrade libxcb-docUpgrade libwacom-dataUpgrade libXrandr-debuginfoUpgrade libxcb-develUpgrade libxkbfile-debuginfoUpgrade libX11Upgrade mesa-libglapiUpgrade libXt-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-private-llvm-develUpgrade libICEUpgrade mesa-libGLUpgrade libXcursor-develUpgrade mesa-private-llvmUpgrade libX11-develUpgrade libXfixes-develUpgrade libxkbcommon-x11-develUpgrade libXrenderUpgrade libevdev-debuginfoUpgrade libinputUpgrade libXrender-debuginfoUpgrade xkeyboard-config-develUpgrade libXt-develUpgrade libXcursor-debuginfoUpgrade libwacomUpgrade libinput-develUpgrade libXxf86vmUpgrade libepoxy-develUpgrade libXfixesUpgrade libxkbcommon-debuginfoUpgrade libXfont2Upgrade libXtUpgrade libxcb-debuginfoUpgrade libfontenc-debuginfoUpgrade libXdmcpUpgrade libXv-debuginfoUpgrade libXrender-develUpgrade libXpm-debuginfoUpgrade libXxf86vm-develUpgrade libfontencUpgrade libxkbfileUpgrade mesa-libGLES-develUpgrade libXi-develUpgrade libxkbfile-develUpgrade mesa-libEGLUpgrade vulkanUpgrade mesa-libGLESUpgrade libXaw-develUpgrade libXdmcp-debuginfoUpgrade mesa-libxatracker-develUpgrade libxkbcommonUpgrade libevdev-develUpgrade libXtst-devel | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade libice | Nov 25, 2019 | Jul 27, 2018 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-libs/libXi.Upgrade x11-libs/libICE.Upgrade x11-libs/libXdmcp.Upgrade x11-libs/libXfixes.Upgrade x11-libs/libXrandr.Upgrade x11-libs/libXrender.Upgrade x11-libs/libXv. | Oct 30, 2017 | Apr 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade libXpmUpgrade libXfixesUpgrade libdrm-develUpgrade mesa-libgbmUpgrade mesa-libxatrackerUpgrade libXtUpgrade libXtst-develUpgrade libXvMC-develUpgrade libXfont2-develUpgrade mesa-filesystemUpgrade mesa-libEGLUpgrade mesa-libOSMesaUpgrade libxkbcommonUpgrade libXrender-develUpgrade libwacom-develUpgrade vulkan-filesystemUpgrade libwacom-dataUpgrade libXfont-develUpgrade libXfontUpgrade xcb-protoUpgrade libXcursorUpgrade libvdpau-develUpgrade libevdev-develUpgrade libxcbUpgrade xkeyboard-config-develUpgrade libX11Upgrade libwacomUpgrade mesa-vulkan-driversUpgrade libXrandrUpgrade libepoxy-develUpgrade libXrenderUpgrade libICEUpgrade libepoxyUpgrade vulkan-develUpgrade libXvMCUpgrade libXawUpgrade libXt-develUpgrade libICE-develUpgrade libXv-develUpgrade libXfixes-develUpgrade mesa-libGLES-develUpgrade libvdpau-docsUpgrade drm-utilsUpgrade mesa-libOSMesa-develUpgrade mesa-libGLUpgrade libxkbcommon-develUpgrade mesa-libGLESUpgrade libXcursor-develUpgrade libxkbfile-develUpgrade libfontenc-develUpgrade mesa-dri-driversUpgrade libxkbfileUpgrade libXaw-develUpgrade libXtstUpgrade libfontencUpgrade mesa-libglapiUpgrade libXi-develUpgrade mesa-libxatracker-develUpgrade libXfont2Upgrade libX11-commonUpgrade xorg-x11-proto-develUpgrade libXxf86vm-develUpgrade mesa-private-llvm-develUpgrade libX11-develUpgrade libvdpauUpgrade libXdmcp-develUpgrade libXrandr-develUpgrade libevdevUpgrade libxcb-develUpgrade mesa-private-llvmUpgrade libXxf86vmUpgrade libxkbcommon-x11Upgrade mesa-libGL-develUpgrade libxkbcommon-x11-develUpgrade mesa-libEGL-develUpgrade libXdmcpUpgrade libinput-develUpgrade libdrmUpgrade libXiUpgrade libinputUpgrade vulkanUpgrade mesa-libgbm-develUpgrade libXvUpgrade xkeyboard-configUpgrade libxcb-docUpgrade libevdev-utilsUpgrade libXpm-devel | Aug 8, 2017 | Feb 28, 2017 |
| Redhat_linux | — | Upgrade libdrm-debuginfoUpgrade libdrm-develUpgrade libXaw-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libEGLUpgrade libXi-debuginfoUpgrade libXfixes-develUpgrade vulkan-develUpgrade libXtst-debuginfoUpgrade libXpmUpgrade mesa-libOSMesaUpgrade libXfont2-debuginfoNo solution existsUpgrade libX11-debuginfoUpgrade libXfontUpgrade mesa-filesystemUpgrade libXrenderUpgrade libXxf86vm-debuginfoUpgrade mesa-libgbm-develUpgrade libXfont-debuginfoUpgrade libXvUpgrade libxkbcommon-x11Upgrade libdrmUpgrade xcb-protoUpgrade libXfixes-debuginfoUpgrade mesa-private-llvm-debuginfoUpgrade xorg-x11-proto-develUpgrade libXawUpgrade libXdmcpUpgrade libwacomUpgrade mesa-vulkan-driversUpgrade libevdev-utilsUpgrade libXvMC-develUpgrade libXfont2-develUpgrade libvdpau-docsUpgrade libvdpau-develUpgrade libX11-commonUpgrade libXrandr-develUpgrade libICE-debuginfoUpgrade vulkan-debuginfoUpgrade vulkan-filesystemUpgrade libXdmcp-develUpgrade mesa-libOSMesa-develUpgrade libXvMC-debuginfoUpgrade mesa-libGL-develUpgrade libwacom-develUpgrade libXtstUpgrade libX11-develUpgrade libXrandr-debuginfoUpgrade libXfont-develUpgrade libepoxyUpgrade libinput-debuginfoUpgrade libevdevUpgrade libXrandrUpgrade mesa-libgbmUpgrade libXiUpgrade mesa-libGLUpgrade libX11Upgrade libxkbfile-develUpgrade libXcursor-develUpgrade libwacom-debuginfoUpgrade libwacom-dataUpgrade libxkbcommon-debuginfoUpgrade libxcb-debuginfoUpgrade libxcbUpgrade libfontencUpgrade libxkbcommonUpgrade libXrender-debuginfoUpgrade mesa-libxatrackerUpgrade libXv-develUpgrade mesa-debuginfoUpgrade libXxf86vm-develUpgrade libXvMCUpgrade libXfixesUpgrade libepoxy-debuginfoUpgrade libXpm-develUpgrade xkeyboard-config-develUpgrade libfontenc-debuginfoUpgrade libXv-debuginfoUpgrade libevdev-develUpgrade drm-utilsUpgrade libXcursor-debuginfoUpgrade libXt-develUpgrade libXaw-develUpgrade mesa-libxatracker-develUpgrade libvdpau-debuginfoUpgrade libXrender-develUpgrade libvdpauUpgrade libXxf86vmUpgrade libxkbfileUpgrade libXpm-debuginfoUpgrade libxkbfile-debuginfoUpgrade libinputUpgrade mesa-libEGL-develUpgrade libXcursorUpgrade libfontenc-develUpgrade libXdmcp-debuginfoUpgrade libxcb-docUpgrade libXi-develUpgrade xkeyboard-configUpgrade libxcb-develUpgrade libevdev-debuginfoUpgrade libXt-debuginfoUpgrade libepoxy-develUpgrade mesa-libglapiUpgrade mesa-private-llvmUpgrade mesa-private-llvm-develUpgrade libxkbcommon-x11-develUpgrade libXfont2Upgrade vulkanUpgrade libICEUpgrade libinput-develUpgrade libxkbcommon-develUpgrade mesa-libGLESUpgrade libXtUpgrade libICE-develUpgrade libXtst-develUpgrade mesa-libGLES-devel | Aug 5, 2017 | Jul 6, 2017 |
| Suse | — | Upgrade libICE-develUpgrade xorg-x11-libICE-x86Upgrade xorg-x11-libICE-develUpgrade xorg-x11-libICEUpgrade libICE6Upgrade xorg-x11-libICE-devel-32bitUpgrade xorg-x11-libICE-32bitUpgrade libICE6-32bit | Jul 6, 2017 | Jul 6, 2017 |
| Ubuntu | — | Upgrade libice-dev (Ubuntu Pro)Upgrade libice6Upgrade libice-devUpgrade libice6 (Ubuntu Pro) | Nov 28, 2022 | Jul 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub