Vulnerabilities (CVE)

Filtered by vendor X.org Subscribe
Filtered by product Libxdmcp
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-2625 2 Redhat, X.org 7 Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Server and 4 more 2024-02-28 2.1 LOW 5.5 MEDIUM
It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.