CVE-2017-2625

CVE Details

Release Date:2018-07-27

Description


It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.

See more information about CVE-2017-2625 from MITRE CVE dictionary and NIST NVD


CVSS v3.0 metrics


NOTE: The following CVSS v3.0 metrics and score provided are preliminary and subject to review.

Base Score: 5.5 Base Metrics: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Access Vector: Local network Attack Complexity: Low
Privileges Required: Low User Interaction: None
Scope: Unchanged Confidentiality Impact: High
Integrity Impact: None Availability Impact: None

Errata information


PlatformErrataRelease Date
Oracle Linux version 7 (libICE)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libX11)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXaw)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXcursor)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXdmcp)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXfixes)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXfont)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXfont2)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXi)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXpm)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXrandr)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXrender)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXt)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXtst)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXv)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXvMC)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libXxf86vm)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libdrm)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libepoxy)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libevdev)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libfontenc)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libinput)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libvdpau)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libwacom)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libxcb)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libxkbcommon)ELSA-2017-18652017-08-07
Oracle Linux version 7 (libxkbfile)ELSA-2017-18652017-08-07
Oracle Linux version 7 (mesa)ELSA-2017-18652017-08-07
Oracle Linux version 7 (mesa-private-llvm)ELSA-2017-18652017-08-07
Oracle Linux version 7 (vulkan)ELSA-2017-18652017-08-07
Oracle Linux version 7 (xcb-proto)ELSA-2017-18652017-08-07
Oracle Linux version 7 (xkeyboard-config)ELSA-2017-18652017-08-07
Oracle Linux version 7 (xorg-x11-proto-devel)ELSA-2017-18652017-08-07



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete