CVE-2017-2626mediumCWE-331

CVE-2017-2626: medium-severity vulnerability in Xorg libICE

Published · Updated

Follow this CVE+ Monitor libICE+ Monitor libice

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.2epss 0.5%
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L
Affected products
Xorg · libICE