rpm package
opensuse/libXdmcp&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/libXdmcp&distro=openSUSE%20Tumbleweed
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-2625 | Med | 6.5 | < 1.1.3-1.11 | 1.1.3-1.11 | Jul 27, 2018 | It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' s |
- affected < 1.1.3-1.11fixed 1.1.3-1.11
It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' s