vulnerability
Red Hat: CVE-2017-2626: Moderate: X.org X11 libraries security, bug fix and enhancement update (RHSA-2017:1865)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:L/Au:N/C:P/I:N/A:N) | 2017-07-06 | 2017-08-05 | 2023-02-14 |
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
2017-07-06
Added
2017-08-05
Modified
2023-02-14
Description
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
Solution(s)
redhat-upgrade-drm-utilsredhat-upgrade-libdrmredhat-upgrade-libdrm-debuginforedhat-upgrade-libdrm-develredhat-upgrade-libepoxyredhat-upgrade-libepoxy-debuginforedhat-upgrade-libepoxy-develredhat-upgrade-libevdevredhat-upgrade-libevdev-debuginforedhat-upgrade-libevdev-develredhat-upgrade-libevdev-utilsredhat-upgrade-libfontencredhat-upgrade-libfontenc-debuginforedhat-upgrade-libfontenc-develredhat-upgrade-libiceredhat-upgrade-libice-debuginforedhat-upgrade-libice-develredhat-upgrade-libinputredhat-upgrade-libinput-debuginforedhat-upgrade-libinput-develredhat-upgrade-libvdpauredhat-upgrade-libvdpau-debuginforedhat-upgrade-libvdpau-develredhat-upgrade-libvdpau-docsredhat-upgrade-libwacomredhat-upgrade-libwacom-dataredhat-upgrade-libwacom-debuginforedhat-upgrade-libwacom-develredhat-upgrade-libx11redhat-upgrade-libx11-commonredhat-upgrade-libx11-debuginforedhat-upgrade-libx11-develredhat-upgrade-libxawredhat-upgrade-libxaw-debuginforedhat-upgrade-libxaw-develredhat-upgrade-libxcbredhat-upgrade-libxcb-debuginforedhat-upgrade-libxcb-develredhat-upgrade-libxcb-docredhat-upgrade-libxcursorredhat-upgrade-libxcursor-debuginforedhat-upgrade-libxcursor-develredhat-upgrade-libxdmcpredhat-upgrade-libxdmcp-debuginforedhat-upgrade-libxdmcp-develredhat-upgrade-libxfixesredhat-upgrade-libxfixes-debuginforedhat-upgrade-libxfixes-develredhat-upgrade-libxfontredhat-upgrade-libxfont-debuginforedhat-upgrade-libxfont-develredhat-upgrade-libxfont2redhat-upgrade-libxfont2-debuginforedhat-upgrade-libxfont2-develredhat-upgrade-libxiredhat-upgrade-libxi-debuginforedhat-upgrade-libxi-develredhat-upgrade-libxkbcommonredhat-upgrade-libxkbcommon-debuginforedhat-upgrade-libxkbcommon-develredhat-upgrade-libxkbcommon-x11redhat-upgrade-libxkbcommon-x11-develredhat-upgrade-libxkbfileredhat-upgrade-libxkbfile-debuginforedhat-upgrade-libxkbfile-develredhat-upgrade-libxpmredhat-upgrade-libxpm-debuginforedhat-upgrade-libxpm-develredhat-upgrade-libxrandrredhat-upgrade-libxrandr-debuginforedhat-upgrade-libxrandr-develredhat-upgrade-libxrenderredhat-upgrade-libxrender-debuginforedhat-upgrade-libxrender-develredhat-upgrade-libxtredhat-upgrade-libxt-debuginforedhat-upgrade-libxt-develredhat-upgrade-libxtstredhat-upgrade-libxtst-debuginforedhat-upgrade-libxtst-develredhat-upgrade-libxvredhat-upgrade-libxv-debuginforedhat-upgrade-libxv-develredhat-upgrade-libxvmcredhat-upgrade-libxvmc-debuginforedhat-upgrade-libxvmc-develredhat-upgrade-libxxf86vmredhat-upgrade-libxxf86vm-debuginforedhat-upgrade-libxxf86vm-develredhat-upgrade-mesa-debuginforedhat-upgrade-mesa-dri-driversredhat-upgrade-mesa-filesystemredhat-upgrade-mesa-libeglredhat-upgrade-mesa-libegl-develredhat-upgrade-mesa-libgbmredhat-upgrade-mesa-libgbm-develredhat-upgrade-mesa-libglredhat-upgrade-mesa-libgl-develredhat-upgrade-mesa-libglapiredhat-upgrade-mesa-libglesredhat-upgrade-mesa-libgles-develredhat-upgrade-mesa-libosmesaredhat-upgrade-mesa-libosmesa-develredhat-upgrade-mesa-libxatrackerredhat-upgrade-mesa-libxatracker-develredhat-upgrade-mesa-private-llvmredhat-upgrade-mesa-private-llvm-debuginforedhat-upgrade-mesa-private-llvm-develredhat-upgrade-mesa-vulkan-driversredhat-upgrade-vulkanredhat-upgrade-vulkan-debuginforedhat-upgrade-vulkan-develredhat-upgrade-vulkan-filesystemredhat-upgrade-xcb-protoredhat-upgrade-xkeyboard-configredhat-upgrade-xkeyboard-config-develredhat-upgrade-xorg-x11-proto-devel
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.