rpm package
opensuse/libICE&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/libICE&distro=openSUSE%20Tumbleweed
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-2626 | Med | 5.2 | < 1.0.10-1.8 | 1.0.10-1.8 | Jul 27, 2018 | It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list. |
- affected < 1.0.10-1.8fixed 1.0.10-1.8
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.