rpm package
suse/libXdmcp&distro=SUSE Linux Enterprise Desktop 12 SP2
pkg:rpm/suse/libXdmcp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-2625 | Med | 6.5 | < 1.1.1-10.1 | 1.1.1-10.1 | Jul 27, 2018 | It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' s |
- affected < 1.1.1-10.1fixed 1.1.1-10.1
It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' s