Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2017-2626

Description

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.

POC

Reference

- https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/Fela-420/LINUX-FUNDAMENTALS

- https://github.com/nediazla/LinuxFundamentals