It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxdmcp | Aug 22, 2024 | Jul 27, 2018 |
| Centos_linux | — | Upgrade libXtstUpgrade mesa-dri-driversUpgrade libxkbcommon-x11-develUpgrade libXfixes-develUpgrade vulkan-debuginfoUpgrade xcb-protoUpgrade libXxf86vm-develUpgrade libxkbfile-debuginfoUpgrade libXvMCUpgrade libfontenc-develUpgrade libvdpau-debuginfoUpgrade mesa-libgbmUpgrade libxkbcommon-develUpgrade libxcb-develUpgrade libXrandr-debuginfoUpgrade libinput-develUpgrade libXtst-develUpgrade libinput-debuginfoUpgrade libXtUpgrade libXrender-develUpgrade libwacom-dataUpgrade libfontenc-debuginfoUpgrade libXawUpgrade libinputUpgrade libXfontUpgrade libXfont2-debuginfoUpgrade vulkanUpgrade mesa-filesystemUpgrade libxkbfile-develUpgrade libXvMC-debuginfoUpgrade mesa-libxatrackerUpgrade libX11-debuginfoUpgrade xkeyboard-configUpgrade libXpm-debuginfoUpgrade libXi-develUpgrade libX11-commonUpgrade libXrenderUpgrade libwacomUpgrade mesa-libOSMesa-develUpgrade mesa-libxatracker-develUpgrade libXdmcp-develUpgrade libvdpau-docsUpgrade libdrm-debuginfoUpgrade libICE-develUpgrade mesa-libGL-develUpgrade vulkan-filesystemUpgrade libXfont2Upgrade libXt-debuginfoUpgrade libxcb-debuginfoUpgrade libXdmcpUpgrade libvdpauUpgrade libfontencUpgrade libXt-develUpgrade libwacom-develUpgrade libXrender-debuginfoUpgrade libXv-debuginfoUpgrade libXxf86vmUpgrade libXtst-debuginfoUpgrade libX11-develUpgrade vulkan-develUpgrade xorg-x11-proto-develUpgrade mesa-vulkan-driversUpgrade drm-utilsUpgrade libXcursorUpgrade mesa-libEGL-develUpgrade libX11Upgrade mesa-libGLES-develUpgrade libXxf86vm-debuginfoUpgrade mesa-private-llvmUpgrade libXiUpgrade libICE-debuginfoUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade libdrmUpgrade libXpmUpgrade libevdev-debuginfoUpgrade libXv-develUpgrade libepoxy-debuginfoUpgrade libxcb-docUpgrade libxkbfileUpgrade xkeyboard-config-develUpgrade libvdpau-develUpgrade libXfixesUpgrade libXfont-develUpgrade libXvMC-develUpgrade libXrandr-develUpgrade mesa-libglapiUpgrade libepoxy-develUpgrade libXdmcp-debuginfoUpgrade libxkbcommonUpgrade libwacom-debuginfoUpgrade libXfixes-debuginfoUpgrade libXpm-develUpgrade libXfont-debuginfoUpgrade libXvUpgrade libevdevUpgrade mesa-libGLESUpgrade libXaw-debuginfoUpgrade libdrm-develUpgrade mesa-private-llvm-debuginfoUpgrade libxkbcommon-x11Upgrade libevdev-develUpgrade libICEUpgrade libXfont2-develUpgrade libXrandrUpgrade mesa-libgbm-develUpgrade mesa-libEGLUpgrade libxkbcommon-debuginfoUpgrade mesa-debuginfoUpgrade libepoxyUpgrade libXaw-develUpgrade libXcursor-debuginfoUpgrade libXcursor-develUpgrade libxcbUpgrade mesa-private-llvm-develUpgrade libevdev-utilsUpgrade libXi-debuginfo | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade libxdmcp | Nov 27, 2019 | Jul 27, 2018 |
| Freebsd | — | Upgrade libXdmcp | Apr 1, 2019 | Mar 21, 2019 |
| Gentoo Linux | — | Upgrade x11-libs/libXi.Upgrade x11-libs/libXfixes.Upgrade x11-libs/libXv.Upgrade x11-base/xorg-server.Upgrade x11-libs/libXdmcp.Upgrade x11-libs/libICE.Upgrade x11-libs/libXrender.Upgrade x11-libs/libXrandr. | Oct 30, 2017 | Apr 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade libevdev-utilsUpgrade libepoxyUpgrade libXrandrUpgrade libXaw-develUpgrade mesa-vulkan-driversUpgrade libX11-develUpgrade libfontenc-develUpgrade mesa-libxatrackerUpgrade mesa-libGLESUpgrade libevdevUpgrade libXfont2Upgrade mesa-dri-driversUpgrade libvdpau-docsUpgrade libXfont2-develUpgrade libXrandr-develUpgrade xcb-protoUpgrade libXvMCUpgrade drm-utilsUpgrade mesa-private-llvm-develUpgrade libxkbcommonUpgrade libxkbcommon-develUpgrade libxkbfile-develUpgrade mesa-private-llvmUpgrade libXtstUpgrade libXcursor-develUpgrade libdrmUpgrade libXvUpgrade libxkbfileUpgrade libxcb-develUpgrade mesa-libglapiUpgrade libxcbUpgrade xkeyboard-configUpgrade libXxf86vmUpgrade mesa-libxatracker-develUpgrade libXdmcpUpgrade libXt-develUpgrade libdrm-develUpgrade libinputUpgrade libXpm-develUpgrade libwacom-dataUpgrade libwacomUpgrade libXfixesUpgrade xkeyboard-config-develUpgrade libwacom-develUpgrade libICE-develUpgrade libXfixes-develUpgrade libICEUpgrade libXfontUpgrade mesa-libGLES-develUpgrade xorg-x11-proto-develUpgrade mesa-libGLUpgrade libfontencUpgrade mesa-libgbm-develUpgrade mesa-filesystemUpgrade libinput-develUpgrade libXiUpgrade libXvMC-develUpgrade libXdmcp-develUpgrade libXfont-develUpgrade mesa-libGL-develUpgrade libXrender-develUpgrade libXv-develUpgrade libevdev-develUpgrade libepoxy-develUpgrade libXawUpgrade mesa-libEGLUpgrade vulkanUpgrade mesa-libOSMesa-develUpgrade vulkan-develUpgrade libXtUpgrade libXcursorUpgrade mesa-libEGL-develUpgrade libX11-commonUpgrade libxcb-docUpgrade libXi-develUpgrade libXrenderUpgrade vulkan-filesystemUpgrade libXtst-develUpgrade mesa-libOSMesaUpgrade libxkbcommon-x11-develUpgrade libX11Upgrade mesa-libgbmUpgrade libvdpau-develUpgrade libXpmUpgrade libXxf86vm-develUpgrade libvdpauUpgrade libxkbcommon-x11 | Aug 8, 2017 | Feb 28, 2017 |
| Redhat_linux | — | Upgrade libX11Upgrade libX11-debuginfoUpgrade libXfixes-develUpgrade libdrm-debuginfoUpgrade mesa-debuginfoUpgrade libXfontUpgrade libXrenderUpgrade libXaw-debuginfoUpgrade xorg-x11-proto-develUpgrade mesa-libOSMesaUpgrade libXi-debuginfoUpgrade mesa-libEGLUpgrade libinput-debuginfoUpgrade libXrender-debuginfoUpgrade libvdpau-develUpgrade libwacom-develUpgrade vulkan-filesystemUpgrade libXi-develUpgrade libepoxy-develUpgrade libICE-debuginfoNo solution existsUpgrade libXfont-develUpgrade libICEUpgrade libfontencUpgrade libwacomUpgrade vulkan-debuginfoUpgrade mesa-libgbmUpgrade xkeyboard-config-develUpgrade libX11-commonUpgrade libXpmUpgrade mesa-libgbm-develUpgrade libXxf86vm-debuginfoUpgrade libevdev-develUpgrade libepoxy-debuginfoUpgrade libXtUpgrade libXrandr-debuginfoUpgrade libXrender-develUpgrade libXcursorUpgrade mesa-filesystemUpgrade vulkan-develUpgrade libXvMC-debuginfoUpgrade libXrandr-develUpgrade libXt-debuginfoUpgrade xcb-protoUpgrade libvdpauUpgrade libXawUpgrade libXfont2-develUpgrade mesa-libGL-develUpgrade libXvMC-develUpgrade mesa-libOSMesa-develUpgrade libdrmUpgrade libxkbcommon-x11Upgrade libxkbcommon-x11-develUpgrade libXfixesUpgrade mesa-private-llvm-debuginfoUpgrade libXfont2-debuginfoUpgrade libXxf86vm-develUpgrade libXtst-debuginfoUpgrade libvdpau-docsUpgrade libwacom-dataUpgrade libXrandrUpgrade mesa-private-llvm-develUpgrade libXxf86vmUpgrade libXpm-develUpgrade libxkbfile-develUpgrade mesa-libGLUpgrade libinputUpgrade libepoxyUpgrade libXv-debuginfoUpgrade mesa-libGLESUpgrade libXcursor-develUpgrade libxcb-develUpgrade libevdevUpgrade libxkbcommon-debuginfoUpgrade libXdmcp-debuginfoUpgrade libXdmcp-develUpgrade libXaw-develUpgrade libwacom-debuginfoUpgrade libXcursor-debuginfoUpgrade libxcbUpgrade libXt-develUpgrade libxkbcommon-develUpgrade libevdev-debuginfoUpgrade libXfont-debuginfoUpgrade libvdpau-debuginfoUpgrade libfontenc-debuginfoUpgrade libXv-develUpgrade mesa-private-llvmUpgrade libevdev-utilsUpgrade libxcb-debuginfoUpgrade libXfont2Upgrade mesa-libglapiUpgrade libICE-develUpgrade libXpm-debuginfoUpgrade mesa-libGLES-develUpgrade libXdmcpUpgrade libinput-develUpgrade mesa-libxatrackerUpgrade vulkanUpgrade mesa-dri-driversUpgrade libxkbcommonUpgrade libxkbfile-debuginfoUpgrade libdrm-develUpgrade libXvMCUpgrade mesa-vulkan-driversUpgrade libxcb-docUpgrade drm-utilsUpgrade libfontenc-develUpgrade libXiUpgrade libXtstUpgrade libX11-develUpgrade libXvUpgrade libXtst-develUpgrade xkeyboard-configUpgrade libxkbfileUpgrade mesa-libEGL-develUpgrade libXfixes-debuginfoUpgrade mesa-libxatracker-devel | Aug 5, 2017 | Jul 6, 2017 |
| Suse | — | Upgrade xorg-x11-libXdmcp-devel-32bitUpgrade xorg-x11-libXdmcp-32bitUpgrade libXdmcp6-32bitUpgrade xorg-x11-libXdmcpUpgrade xorg-x11-libXdmcp-develUpgrade xorg-x11-libXdmcp-x86Upgrade libXdmcp-develUpgrade libXdmcp6 | Jul 6, 2017 | Jul 6, 2017 |
| Ubuntu | — | Upgrade libxdmcp6 (Ubuntu Pro) | Oct 20, 2022 | Jul 6, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub