It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxdmcp | Aug 22, 2024 | Jul 27, 2018 |
| Centos_linux | — | Upgrade libxkbcommon-debuginfoUpgrade libvdpau-develUpgrade libepoxy-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-private-llvm-develUpgrade libxkbfileUpgrade mesa-libGLUpgrade libXv-develUpgrade mesa-debuginfoUpgrade xkeyboard-config-develUpgrade libepoxyUpgrade libXrandr-develUpgrade libXvMC-develUpgrade libevdev-debuginfoUpgrade libXfont-develUpgrade libXiUpgrade mesa-private-llvmUpgrade libXcursor-debuginfoUpgrade libXcursor-develUpgrade libxkbcommonUpgrade drm-utilsUpgrade libevdev-develUpgrade mesa-libEGLUpgrade libICEUpgrade libxcb-docUpgrade libdrmUpgrade mesa-libOSMesaUpgrade libdrm-develUpgrade libwacom-debuginfoUpgrade libXaw-debuginfoUpgrade libXpm-develUpgrade libXfont-debuginfoUpgrade libXfixes-debuginfoUpgrade mesa-libGLES-develUpgrade mesa-vulkan-driversUpgrade libXvUpgrade mesa-libglapiUpgrade libXdmcp-debuginfoUpgrade libX11Upgrade xorg-x11-proto-develUpgrade libepoxy-develUpgrade libXcursorUpgrade libICE-debuginfoUpgrade libXxf86vm-debuginfoUpgrade vulkan-develUpgrade libevdev-utilsUpgrade libXfont2-develUpgrade mesa-libGLESUpgrade libevdevUpgrade mesa-private-llvm-debuginfoUpgrade libXrandrUpgrade libxkbcommon-x11Upgrade libXpmUpgrade libXaw-develUpgrade libxcbUpgrade mesa-libgbm-develUpgrade libXfixesUpgrade libXi-debuginfoUpgrade libX11-commonUpgrade mesa-libOSMesa-develUpgrade libXxf86vm-develUpgrade libXfixes-develUpgrade libXtst-debuginfoUpgrade libX11-develUpgrade libXxf86vmUpgrade xcb-protoUpgrade vulkan-debuginfoUpgrade libXrender-develUpgrade libxcb-develUpgrade libXtstUpgrade libX11-debuginfoUpgrade libICE-develUpgrade libwacom-dataUpgrade libdrm-debuginfoUpgrade libXv-debuginfoUpgrade libinput-develUpgrade libxkbcommon-x11-develUpgrade libXdmcpUpgrade libwacomUpgrade libxkbcommon-develUpgrade mesa-dri-driversUpgrade libXtUpgrade libvdpau-debuginfoUpgrade libvdpau-docsUpgrade libXtst-develUpgrade libinput-debuginfoUpgrade libXvMC-debuginfoUpgrade mesa-libgbmUpgrade libXdmcp-develUpgrade mesa-libxatracker-develUpgrade libXrandr-debuginfoUpgrade libXfont2Upgrade libxcb-debuginfoUpgrade libfontencUpgrade xkeyboard-configUpgrade libXi-develUpgrade libXrender-debuginfoUpgrade mesa-libxatrackerUpgrade vulkan-filesystemUpgrade libxkbfile-debuginfoUpgrade mesa-libGL-develUpgrade libXvMCUpgrade libvdpauUpgrade libwacom-develUpgrade libXpm-debuginfoUpgrade libXrenderUpgrade libXt-develUpgrade libxkbfile-develUpgrade libXfontUpgrade libinputUpgrade vulkanUpgrade libXawUpgrade libXt-debuginfoUpgrade libXfont2-debuginfoUpgrade mesa-filesystemUpgrade libfontenc-develUpgrade libfontenc-debuginfo | Aug 28, 2019 | Jul 27, 2018 |
| Debian | — | Upgrade libxdmcp | Nov 27, 2019 | Jul 27, 2018 |
| Freebsd | — | Upgrade libXdmcp | Apr 1, 2019 | Mar 21, 2019 |
| Gentoo Linux | — | Upgrade x11-libs/libXfixes.Upgrade x11-libs/libXv.Upgrade x11-libs/libXdmcp.Upgrade x11-base/xorg-server.Upgrade x11-libs/libXi.Upgrade x11-libs/libXrandr.Upgrade x11-libs/libXrender.Upgrade x11-libs/libICE. | Oct 30, 2017 | Apr 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Jan 18, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade libXaw-develUpgrade libXfont2Upgrade libXxf86vmUpgrade libxkbcommonUpgrade drm-utilsUpgrade mesa-private-llvm-develUpgrade libevdev-utilsUpgrade libxcb-develUpgrade libfontenc-develUpgrade libepoxyUpgrade libevdevUpgrade libXcursor-develUpgrade mesa-libGLESUpgrade mesa-libxatrackerUpgrade libXtstUpgrade mesa-private-llvmUpgrade libXpm-develUpgrade libdrm-develUpgrade xkeyboard-configUpgrade libXrandrUpgrade mesa-dri-driversUpgrade libXrandr-develUpgrade libxkbfile-develUpgrade libX11-develUpgrade libwacom-dataUpgrade libxcbUpgrade libinputUpgrade libXvUpgrade mesa-vulkan-driversUpgrade libXdmcpUpgrade libXfont2-develUpgrade libvdpau-docsUpgrade mesa-libglapiUpgrade libxkbfileUpgrade libXt-develUpgrade libXvMCUpgrade libxkbcommon-develUpgrade libdrmUpgrade xcb-protoUpgrade mesa-libxatracker-develUpgrade libXdmcp-develUpgrade vulkan-develUpgrade libXawUpgrade libX11Upgrade mesa-libOSMesaUpgrade mesa-libEGL-develUpgrade libXrenderUpgrade libXcursorUpgrade mesa-libOSMesa-develUpgrade libX11-commonUpgrade libXtUpgrade libICEUpgrade libICE-develUpgrade xkeyboard-config-develUpgrade mesa-libGLES-develUpgrade libwacomUpgrade xorg-x11-proto-develUpgrade vulkanUpgrade libXxf86vm-develUpgrade libXfixes-develUpgrade libwacom-develUpgrade libxkbcommon-x11Upgrade libxcb-docUpgrade libepoxy-develUpgrade libXi-develUpgrade libinput-develUpgrade libXvMC-develUpgrade libfontencUpgrade libXiUpgrade libXfont-develUpgrade libXv-develUpgrade mesa-libGL-develUpgrade libXrender-develUpgrade libevdev-develUpgrade mesa-libgbm-develUpgrade libvdpauUpgrade libXpmUpgrade mesa-libGLUpgrade libXfixesUpgrade libvdpau-develUpgrade mesa-filesystemUpgrade mesa-libEGLUpgrade libxkbcommon-x11-develUpgrade libXfontUpgrade mesa-libgbmUpgrade vulkan-filesystemUpgrade libXtst-devel | Aug 8, 2017 | Feb 28, 2017 |
| Redhat_linux | — | Upgrade mesa-filesystemUpgrade libepoxy-debuginfoUpgrade libX11Upgrade libXfontUpgrade libXfixesUpgrade libvdpauUpgrade libICE-debuginfoUpgrade vulkan-develUpgrade mesa-libgbm-develUpgrade libX11-commonUpgrade libfontencUpgrade libXvMC-debuginfoUpgrade libevdev-develUpgrade libXt-debuginfoUpgrade libXfont-develUpgrade libICEUpgrade vulkan-filesystemUpgrade mesa-libgbmUpgrade libXawUpgrade xcb-protoUpgrade libwacom-develUpgrade libX11-debuginfoUpgrade libXi-debuginfoUpgrade libXpmUpgrade libXfont2-develUpgrade libXxf86vm-develUpgrade mesa-debuginfoUpgrade mesa-private-llvm-debuginfoUpgrade libXxf86vm-debuginfoUpgrade mesa-libOSMesa-develUpgrade libXrender-debuginfoUpgrade libwacomUpgrade xkeyboard-config-develUpgrade libXcursorUpgrade libXi-develUpgrade libXtst-debuginfoUpgrade libXfont2-debuginfoUpgrade libvdpau-develUpgrade libepoxy-develUpgrade mesa-libGL-develUpgrade libdrm-debuginfoUpgrade mesa-libOSMesaUpgrade libXvMC-develUpgrade libinput-debuginfoUpgrade vulkan-debuginfoUpgrade xorg-x11-proto-develUpgrade libXrenderUpgrade libXaw-debuginfoUpgrade libxkbcommon-x11No solution existsUpgrade libxkbcommon-x11-develUpgrade libXrender-develUpgrade libXtUpgrade mesa-libEGLUpgrade libXrandr-debuginfoUpgrade libXfixes-develUpgrade libdrmUpgrade libXrandr-develUpgrade libXdmcp-develUpgrade vulkanUpgrade mesa-libxatracker-develUpgrade libxkbfileUpgrade libXcursor-develUpgrade libXfixes-debuginfoUpgrade mesa-libEGL-develUpgrade libXtst-develUpgrade libXiUpgrade libXt-develUpgrade libxcbUpgrade libxkbcommon-develUpgrade libfontenc-develUpgrade libwacom-debuginfoUpgrade libxkbcommon-debuginfoUpgrade mesa-private-llvmUpgrade libxcb-debuginfoUpgrade libXvMCUpgrade libevdev-debuginfoUpgrade libwacom-dataUpgrade mesa-private-llvm-develUpgrade mesa-libGLES-develUpgrade libevdev-utilsUpgrade libinputUpgrade libXcursor-debuginfoUpgrade libxcb-develUpgrade libXdmcp-debuginfoUpgrade xkeyboard-configUpgrade libXaw-develUpgrade libevdevUpgrade libxkbfile-debuginfoUpgrade libXtstUpgrade mesa-dri-driversUpgrade libXpm-debuginfoUpgrade libICE-develUpgrade mesa-libglapiUpgrade libXvUpgrade libinput-develUpgrade libXpm-develUpgrade libvdpau-debuginfoUpgrade libxkbcommonUpgrade libepoxyUpgrade libXfont-debuginfoUpgrade libXrandrUpgrade libxkbfile-develUpgrade libvdpau-docsUpgrade libxcb-docUpgrade drm-utilsUpgrade libXfont2Upgrade mesa-vulkan-driversUpgrade mesa-libGLESUpgrade libX11-develUpgrade libXv-develUpgrade mesa-libxatrackerUpgrade libfontenc-debuginfoUpgrade libdrm-develUpgrade libXdmcpUpgrade libXxf86vmUpgrade mesa-libGLUpgrade libXv-debuginfo | Aug 5, 2017 | Jul 6, 2017 |
| Suse | — | Upgrade xorg-x11-libXdmcp-devel-32bitUpgrade xorg-x11-libXdmcpUpgrade libXdmcp6-32bitUpgrade xorg-x11-libXdmcp-develUpgrade xorg-x11-libXdmcp-32bitUpgrade libXdmcp6Upgrade libXdmcp-develUpgrade xorg-x11-libXdmcp-x86 | Jul 6, 2017 | Jul 6, 2017 |
| Ubuntu | — | Upgrade libxdmcp6 (Ubuntu Pro) | Oct 20, 2022 | Jul 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub