It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxdmcp | Aug 22, 2024 | Jul 27, 2018 |
| Centos_linux | — | Upgrade mesa-libgbmUpgrade libfontenc-debuginfoUpgrade libXt-develUpgrade libinput-debuginfoUpgrade libvdpau-docsUpgrade libXdmcpUpgrade libXrender-develUpgrade libXrenderUpgrade libdrm-debuginfoUpgrade libXfont2Upgrade mesa-libGL-develUpgrade libXt-debuginfoUpgrade xcb-protoUpgrade libfontencUpgrade libxcb-debuginfoUpgrade libXtUpgrade libXvMCUpgrade libX11-debuginfoUpgrade libvdpauUpgrade libXdmcp-develUpgrade libxkbcommon-develUpgrade mesa-libxatracker-develUpgrade mesa-dri-driversUpgrade libX11-commonUpgrade libXxf86vm-develUpgrade vulkan-debuginfoUpgrade libwacom-develUpgrade libxkbcommon-x11-develUpgrade libXtst-develUpgrade libX11-develUpgrade libXpm-debuginfoUpgrade libwacomUpgrade libwacom-dataUpgrade vulkanUpgrade libXawUpgrade mesa-filesystemUpgrade libinputUpgrade mesa-libxatrackerUpgrade libxkbfile-develUpgrade libXfont2-debuginfoUpgrade libfontenc-develUpgrade libXrender-debuginfoUpgrade libXv-debuginfoUpgrade xkeyboard-configUpgrade libxkbfile-debuginfoUpgrade libICE-develUpgrade libinput-develUpgrade libXrandr-debuginfoUpgrade libXfontUpgrade libXtstUpgrade libXtst-debuginfoUpgrade vulkan-filesystemUpgrade libXfixes-develUpgrade libxcb-develUpgrade libXi-develUpgrade libXvMC-debuginfoUpgrade libvdpau-debuginfoUpgrade libXxf86vmUpgrade mesa-libOSMesa-develUpgrade mesa-debuginfoUpgrade libXpmUpgrade libevdevUpgrade libxcbUpgrade mesa-libOSMesaUpgrade drm-utilsUpgrade libxkbcommon-debuginfoUpgrade mesa-libgbm-develUpgrade libXdmcp-debuginfoUpgrade libepoxyUpgrade libX11Upgrade libXpm-develUpgrade mesa-private-llvm-debuginfoUpgrade mesa-libGLESUpgrade libXaw-debuginfoUpgrade libxkbcommon-x11Upgrade mesa-private-llvm-develUpgrade libXrandrUpgrade libXfont-debuginfoUpgrade libevdev-develUpgrade libvdpau-develUpgrade libXfixesUpgrade libXv-develUpgrade libevdev-utilsUpgrade libICEUpgrade mesa-libGLUpgrade libxcb-docUpgrade mesa-libGLES-develUpgrade libXiUpgrade libXxf86vm-debuginfoUpgrade libICE-debuginfoUpgrade vulkan-develUpgrade xorg-x11-proto-develUpgrade libXvMC-develUpgrade xkeyboard-config-develUpgrade libXfont-develUpgrade mesa-libglapiUpgrade libXrandr-develUpgrade libepoxy-debuginfoUpgrade mesa-libEGL-develUpgrade libxkbcommonUpgrade libwacom-debuginfoUpgrade mesa-private-llvmUpgrade libXvUpgrade mesa-vulkan-driversUpgrade libXcursor-debuginfoUpgrade libdrm-develUpgrade libXfont2-develUpgrade mesa-libEGLUpgrade libXcursor-develUpgrade libXcursorUpgrade libXfixes-debuginfoUpgrade libepoxy-develUpgrade libdrmUpgrade libxkbfileUpgrade libevdev-debuginfoUpgrade libXi-debuginfoUpgrade libXaw-devel | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade libxdmcp | Nov 27, 2019 | Jul 27, 2018 |
| Freebsd | — | Upgrade libXdmcp | Apr 1, 2019 | Mar 21, 2019 |
| Gentoo Linux | — | Upgrade x11-libs/libXi.Upgrade x11-base/xorg-server.Upgrade x11-libs/libXv.Upgrade x11-libs/libXfixes.Upgrade x11-libs/libXdmcp.Upgrade x11-libs/libICE.Upgrade x11-libs/libXrender.Upgrade x11-libs/libXrandr. | Oct 30, 2017 | Apr 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade libXtstUpgrade libXt-develUpgrade libepoxyUpgrade xcb-protoUpgrade libdrm-develUpgrade libinputUpgrade libevdevUpgrade mesa-libGLESUpgrade libXrandrUpgrade libevdev-utilsUpgrade libXrandr-develUpgrade mesa-libxatrackerUpgrade xkeyboard-configUpgrade libXpm-develUpgrade libxkbcommonUpgrade libfontenc-develUpgrade libxcb-develUpgrade mesa-private-llvmUpgrade libXcursor-develUpgrade libxkbcommon-develUpgrade libXvMCUpgrade libxkbfile-develUpgrade mesa-dri-driversUpgrade mesa-vulkan-driversUpgrade libvdpau-docsUpgrade libXfont2-develUpgrade libXaw-develUpgrade libxcbUpgrade libXfont2Upgrade libX11-develUpgrade mesa-libglapiUpgrade libXdmcpUpgrade libwacom-dataUpgrade drm-utilsUpgrade libdrmUpgrade libXvUpgrade libxkbfileUpgrade libXxf86vmUpgrade mesa-libxatracker-develUpgrade mesa-private-llvm-develUpgrade libXfixesUpgrade libX11Upgrade mesa-libGLUpgrade libXcursorUpgrade mesa-filesystemUpgrade libXpmUpgrade mesa-libOSMesa-develUpgrade libXawUpgrade libXxf86vm-develUpgrade xkeyboard-config-develUpgrade libvdpauUpgrade libvdpau-develUpgrade libXrender-develUpgrade libXv-develUpgrade libevdev-develUpgrade mesa-libGL-develUpgrade mesa-libgbm-develUpgrade libXvMC-develUpgrade libXdmcp-develUpgrade libXfont-develUpgrade libinput-develUpgrade libfontencUpgrade libXiUpgrade mesa-libEGL-develUpgrade mesa-libEGLUpgrade libxcb-docUpgrade libXi-develUpgrade libepoxy-develUpgrade vulkan-develUpgrade libXtUpgrade libX11-commonUpgrade mesa-libGLES-develUpgrade libXrenderUpgrade libwacomUpgrade xorg-x11-proto-develUpgrade libXfontUpgrade vulkanUpgrade libwacom-develUpgrade libxkbcommon-x11Upgrade libXtst-develUpgrade mesa-libOSMesaUpgrade libICEUpgrade libXfixes-develUpgrade libICE-develUpgrade vulkan-filesystemUpgrade mesa-libgbmUpgrade libxkbcommon-x11-devel | Aug 8, 2017 | Feb 28, 2017 |
| Redhat_linux | — | Upgrade libXt-debuginfoUpgrade libXvMC-develUpgrade mesa-libOSMesaUpgrade libXrandr-debuginfoUpgrade libXrender-develUpgrade mesa-libGL-develUpgrade libdrmUpgrade libwacom-develUpgrade mesa-libgbm-develUpgrade libICE-debuginfoUpgrade libepoxy-debuginfoUpgrade libxkbcommon-x11-develUpgrade mesa-filesystemUpgrade mesa-libgbmUpgrade libXaw-debuginfoUpgrade libvdpauUpgrade libinput-debuginfoUpgrade libX11-debuginfoUpgrade libXawUpgrade vulkan-debuginfoUpgrade xorg-x11-proto-develUpgrade libvdpau-develUpgrade xcb-protoUpgrade libXi-debuginfoUpgrade libXpmUpgrade libXxf86vm-debuginfoUpgrade libXrender-debuginfoUpgrade libXvMC-debuginfoUpgrade vulkan-filesystemUpgrade libXfontUpgrade libX11Upgrade libdrm-debuginfoUpgrade libXfont2-develUpgrade mesa-debuginfoUpgrade libepoxy-develUpgrade mesa-libOSMesa-develUpgrade libwacomUpgrade libXfont-develUpgrade vulkan-develUpgrade mesa-private-llvm-debuginfoUpgrade libfontencUpgrade libXi-develUpgrade libXfixes-develUpgrade mesa-libEGLUpgrade libICEUpgrade libXfont2-debuginfoUpgrade libXtst-debuginfoUpgrade libXrenderUpgrade libXcursorNo solution existsUpgrade libxkbcommon-x11Upgrade xkeyboard-config-develUpgrade libXtUpgrade libXfixesUpgrade libevdev-develUpgrade libXrandr-develUpgrade libX11-commonUpgrade libXxf86vm-develUpgrade libxkbcommon-debuginfoUpgrade libepoxyUpgrade libXdmcp-debuginfoUpgrade libXrandrUpgrade libxcb-develUpgrade libXcursor-debuginfoUpgrade xkeyboard-configUpgrade mesa-libglapiUpgrade libxkbcommon-develUpgrade libevdev-utilsUpgrade libXdmcp-develUpgrade libXcursor-develUpgrade mesa-vulkan-driversUpgrade libXv-develUpgrade libwacom-debuginfoUpgrade libXfont-debuginfoUpgrade libxkbfile-develUpgrade mesa-private-llvmUpgrade libevdevUpgrade libXaw-develUpgrade libfontenc-debuginfoUpgrade libXpm-debuginfoUpgrade libXvUpgrade vulkanUpgrade libXpm-develUpgrade libwacom-dataUpgrade libX11-develUpgrade libxkbcommonUpgrade libXvMCUpgrade mesa-dri-driversUpgrade libXtstUpgrade libinput-develUpgrade libxkbfile-debuginfoUpgrade libICE-develUpgrade libXiUpgrade mesa-libxatrackerUpgrade mesa-libEGL-develUpgrade libinputUpgrade libvdpau-debuginfoUpgrade libxcb-docUpgrade mesa-libGLES-develUpgrade libXt-develUpgrade libevdev-debuginfoUpgrade mesa-private-llvm-develUpgrade libXv-debuginfoUpgrade mesa-libGLESUpgrade libxcbUpgrade libXdmcpUpgrade libXtst-develUpgrade libXfont2Upgrade drm-utilsUpgrade libdrm-develUpgrade libxcb-debuginfoUpgrade libXfixes-debuginfoUpgrade libxkbfileUpgrade libXxf86vmUpgrade mesa-libxatracker-develUpgrade libfontenc-develUpgrade mesa-libGLUpgrade libvdpau-docs | Aug 5, 2017 | Jul 6, 2017 |
| Suse | — | Upgrade libXdmcp6-32bitUpgrade xorg-x11-libXdmcp-devel-32bitUpgrade xorg-x11-libXdmcpUpgrade xorg-x11-libXdmcp-develUpgrade xorg-x11-libXdmcp-32bitUpgrade libXdmcp6Upgrade libXdmcp-develUpgrade xorg-x11-libXdmcp-x86 | Jul 6, 2017 | Jul 6, 2017 |
| Ubuntu | — | Upgrade libxdmcp6 (Ubuntu Pro) | Oct 20, 2022 | Jul 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub