rpm package
suse/libICE&distro=SUSE Linux Enterprise Software Development Kit 12 SP3
pkg:rpm/suse/libICE&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-2626 | Med | 5.2 | < 1.0.8-12.1 | 1.0.8-12.1 | Jul 27, 2018 | It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list. |
- affected < 1.0.8-12.1fixed 1.0.8-12.1
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.