It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxdmcp | Aug 22, 2024 | Jul 27, 2018 |
| Centos_linux | — | Upgrade libICEUpgrade libevdev-utilsUpgrade libXcursor-develUpgrade mesa-libgbm-develUpgrade libxkbcommon-debuginfoUpgrade libX11Upgrade libXcursorUpgrade libepoxyUpgrade libevdev-develUpgrade mesa-libEGLUpgrade xorg-x11-proto-develUpgrade libxkbcommon-x11Upgrade libXvUpgrade libXxf86vm-debuginfoUpgrade mesa-vulkan-driversUpgrade libICE-debuginfoUpgrade mesa-private-llvmUpgrade mesa-libOSMesaUpgrade vulkan-develUpgrade libXpm-develUpgrade libxkbcommonUpgrade libdrm-develUpgrade mesa-libGLES-develUpgrade libdrmUpgrade libwacom-debuginfoUpgrade mesa-private-llvm-develUpgrade mesa-private-llvm-debuginfoUpgrade mesa-libGLESUpgrade drm-utilsUpgrade libXaw-debuginfoUpgrade libXdmcp-debuginfoUpgrade libepoxy-develUpgrade libXfont-debuginfoUpgrade libxcb-docUpgrade libevdevUpgrade mesa-debuginfoUpgrade libxcbUpgrade libvdpau-develUpgrade libXvMC-develUpgrade libXcursor-debuginfoUpgrade libXpmUpgrade libxkbfileUpgrade mesa-libGLUpgrade libXfont-develUpgrade libXv-develUpgrade libXfixesUpgrade xkeyboard-config-develUpgrade libXrandr-develUpgrade libXaw-develUpgrade libXfixes-debuginfoUpgrade libXiUpgrade libXfont2-develUpgrade mesa-libEGL-develUpgrade libevdev-debuginfoUpgrade libepoxy-debuginfoUpgrade libXrandrUpgrade mesa-libglapiUpgrade libXi-debuginfoUpgrade libXrender-debuginfoUpgrade mesa-libxatrackerUpgrade libXtst-debuginfoUpgrade libX11-develUpgrade xcb-protoUpgrade vulkan-debuginfoUpgrade vulkan-filesystemUpgrade libXi-develUpgrade xkeyboard-configUpgrade libxkbcommon-x11-develUpgrade libXv-debuginfoUpgrade libxkbcommon-develUpgrade libXtst-develUpgrade mesa-libxatracker-develUpgrade libXt-debuginfoUpgrade libvdpau-docsUpgrade mesa-dri-driversUpgrade libXvMCUpgrade libvdpauUpgrade libinput-debuginfoUpgrade libX11-debuginfoUpgrade libwacom-develUpgrade libICE-develUpgrade libXt-develUpgrade libXtstUpgrade libvdpau-debuginfoUpgrade libxcb-develUpgrade mesa-libgbmUpgrade libX11-commonUpgrade libXrandr-debuginfoUpgrade mesa-libOSMesa-develUpgrade libfontencUpgrade mesa-libGL-develUpgrade libXdmcpUpgrade libXfont2Upgrade libxcb-debuginfoUpgrade libfontenc-debuginfoUpgrade libXvMC-debuginfoUpgrade libXpm-debuginfoUpgrade libwacom-dataUpgrade libdrm-debuginfoUpgrade vulkanUpgrade libfontenc-develUpgrade libXrenderUpgrade libwacomUpgrade libXrender-develUpgrade libXdmcp-develUpgrade libXawUpgrade libXfontUpgrade libinputUpgrade libxkbfile-develUpgrade libXfont2-debuginfoUpgrade mesa-filesystemUpgrade libxkbfile-debuginfoUpgrade libXtUpgrade libinput-develUpgrade libXxf86vm-develUpgrade libXxf86vmUpgrade libXfixes-devel | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade libxdmcp | Nov 27, 2019 | Jul 27, 2018 |
| Freebsd | — | Upgrade libXdmcp | Apr 1, 2019 | Mar 21, 2019 |
| Gentoo Linux | — | Upgrade x11-libs/libICE.Upgrade x11-libs/libXrandr.Upgrade x11-libs/libXrender.Upgrade x11-base/xorg-server.Upgrade x11-libs/libXv.Upgrade x11-libs/libXdmcp.Upgrade x11-libs/libXi.Upgrade x11-libs/libXfixes. | Oct 30, 2017 | Apr 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade vulkan-develUpgrade libxcb-docUpgrade mesa-filesystemUpgrade libXrenderUpgrade libXtUpgrade mesa-libEGL-develUpgrade libXcursorUpgrade mesa-libOSMesa-develUpgrade libwacom-develUpgrade libICEUpgrade libxkbcommon-x11Upgrade libXfixes-develUpgrade libICE-develUpgrade libepoxy-develUpgrade libXawUpgrade libXi-develUpgrade libX11-commonUpgrade mesa-libEGLUpgrade libX11Upgrade mesa-libOSMesaUpgrade vulkan-filesystemUpgrade libxkbcommon-x11-develUpgrade mesa-libgbmUpgrade libXtst-develUpgrade libevdev-develUpgrade libwacomUpgrade libfontencUpgrade libinput-develUpgrade libXiUpgrade libXdmcp-develUpgrade libXrender-develUpgrade mesa-libgbm-develUpgrade libXv-develUpgrade libXpmUpgrade mesa-libGL-develUpgrade libvdpauUpgrade mesa-libGLUpgrade mesa-libGLES-develUpgrade libvdpau-develUpgrade libXxf86vm-develUpgrade libXvMC-develUpgrade libXfixesUpgrade xkeyboard-config-develUpgrade vulkanUpgrade libXfont-develUpgrade xorg-x11-proto-develUpgrade libXfontUpgrade mesa-libxatracker-develUpgrade libwacom-dataUpgrade libXpm-develUpgrade libXcursor-develUpgrade libxcb-develUpgrade libvdpau-docsUpgrade libXdmcpUpgrade xcb-protoUpgrade mesa-libglapiUpgrade libXt-develUpgrade libinputUpgrade libdrm-develUpgrade libXxf86vmUpgrade mesa-dri-driversUpgrade libXrandr-develUpgrade libevdev-utilsUpgrade mesa-libGLESUpgrade mesa-libxatrackerUpgrade libXrandrUpgrade libfontenc-develUpgrade libevdevUpgrade libepoxyUpgrade libXfont2Upgrade mesa-private-llvm-develUpgrade libXaw-develUpgrade libX11-develUpgrade libxcbUpgrade drm-utilsUpgrade mesa-vulkan-driversUpgrade xkeyboard-configUpgrade libxkbcommonUpgrade libxkbfile-develUpgrade libxkbcommon-develUpgrade libXvMCUpgrade libXfont2-develUpgrade libdrmUpgrade libxkbfileUpgrade libXvUpgrade libXtstUpgrade mesa-private-llvm | Aug 8, 2017 | Feb 28, 2017 |
| Redhat_linux | — | Upgrade libXfont2-develUpgrade libXaw-debuginfoUpgrade libwacomUpgrade libXi-debuginfoUpgrade mesa-libgbmUpgrade libXrender-debuginfoUpgrade mesa-libOSMesa-develUpgrade mesa-private-llvm-debuginfoUpgrade libxkbcommon-x11-develUpgrade libXfont2-debuginfoUpgrade libevdev-develUpgrade libinput-debuginfoUpgrade libXpmUpgrade libvdpauUpgrade xcb-protoUpgrade libdrm-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-proto-develUpgrade mesa-libEGLUpgrade libXvMC-debuginfoUpgrade mesa-libGL-develUpgrade libXi-develUpgrade xkeyboard-config-develUpgrade libwacom-develUpgrade libXxf86vm-debuginfoUpgrade libICEUpgrade libXfont-develUpgrade libXrandr-debuginfoUpgrade libXtst-debuginfoUpgrade libXcursorUpgrade libXxf86vm-develUpgrade libXrender-develUpgrade libICE-debuginfoUpgrade libXfixes-develUpgrade libepoxy-debuginfoUpgrade libXfontUpgrade mesa-filesystemUpgrade libXrandr-develUpgrade libX11-commonUpgrade libfontencUpgrade libX11Upgrade libvdpau-develUpgrade vulkan-filesystemUpgrade libXtUpgrade libXvMC-develNo solution existsUpgrade vulkan-develUpgrade vulkan-debuginfoUpgrade mesa-debuginfoUpgrade libXt-debuginfoUpgrade libXfixesUpgrade libXawUpgrade libdrmUpgrade libXrenderUpgrade mesa-libgbm-develUpgrade libxkbcommon-x11Upgrade libepoxy-develUpgrade mesa-libOSMesaUpgrade libevdev-utilsUpgrade libwacom-debuginfoUpgrade libfontenc-develUpgrade libXv-debuginfoUpgrade libxcbUpgrade libX11-develUpgrade libXfont-debuginfoUpgrade libvdpau-docsUpgrade mesa-libEGL-develUpgrade libepoxyUpgrade mesa-vulkan-driversUpgrade libxcb-docUpgrade drm-utilsUpgrade libxkbcommonUpgrade libdrm-develUpgrade libXrandrUpgrade libXfont2Upgrade mesa-libxatrackerUpgrade libXdmcp-develUpgrade mesa-private-llvmUpgrade libXiUpgrade libXdmcpUpgrade mesa-libGLUpgrade mesa-libGLESUpgrade libvdpau-debuginfoUpgrade libevdevUpgrade libevdev-debuginfoUpgrade mesa-private-llvm-develUpgrade libinputUpgrade libXaw-develUpgrade libxkbcommon-debuginfoUpgrade libXcursor-debuginfoUpgrade libxkbcommon-develUpgrade libXcursor-develUpgrade libXvMCUpgrade libxkbfile-develUpgrade libXtst-develUpgrade libfontenc-debuginfoUpgrade mesa-dri-driversUpgrade libXvUpgrade vulkanUpgrade libxkbfile-debuginfoUpgrade libXtstUpgrade xkeyboard-configUpgrade libxcb-debuginfoUpgrade mesa-libglapiUpgrade libXv-develUpgrade libXpm-develUpgrade libXdmcp-debuginfoUpgrade libxkbfileUpgrade libXpm-debuginfoUpgrade libxcb-develUpgrade libXt-develUpgrade libwacom-dataUpgrade mesa-libGLES-develUpgrade libICE-develUpgrade libXfixes-debuginfoUpgrade libinput-develUpgrade mesa-libxatracker-develUpgrade libXxf86vm | Aug 5, 2017 | Jul 6, 2017 |
| Suse | — | Upgrade xorg-x11-libXdmcp-x86Upgrade libXdmcp6Upgrade libXdmcp-develUpgrade xorg-x11-libXdmcp-32bitUpgrade libXdmcp6-32bitUpgrade xorg-x11-libXdmcp-devel-32bitUpgrade xorg-x11-libXdmcpUpgrade xorg-x11-libXdmcp-devel | Jul 6, 2017 | Jul 6, 2017 |
| Ubuntu | — | Upgrade libxdmcp6 (Ubuntu Pro) | Oct 20, 2022 | Jul 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub