Vulnerabilities (CVE)

Filtered by vendor Freedesktop Subscribe
Filtered by product Libice
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-2626 2 Freedesktop, Redhat 6 Libice, Enterprise Linux Desktop, Enterprise Linux Server and 3 more 2024-11-21 2.1 LOW 5.2 MEDIUM
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.