CVE-2017-2625: redhat enterprise_linux Insufficient Entropy
Vulnerability summary
CVE-2017-2625 is a medium (CVSS 6.5) Insufficient Entropy vulnerability in redhat enterprise_linux. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.8% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 27-07-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
CVSS metrics
6 scores · 5 sources · 2 versions- NVDNIST5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NDiffers
- OSV · AlpineEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NDiffers
EPSS trend
Probability
0.53%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
0.00 pp
From 0.53% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (x41-dsec.de)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-331Insufficient EntropyThe product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
- CWE-320Key Management ErrorsWeaknesses in this category are related to errors in the management of cryptographic keys.
Affected systems
Suse12 products
- libXdmcp&distro=SUSE Linux Enterprise Desktop 12 SP2< 1.1.1-10.1
- libXdmcp&distro=SUSE Linux Enterprise Desktop 12 SP3< 1.1.1-12.1
- libXdmcp&distro=SUSE Linux Enterprise Server 12 SP2< 1.1.1-10.1
- libXdmcp&distro=SUSE Linux Enterprise Server 12 SP3< 1.1.1-12.1
- libXdmcp&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 1.1.1-10.1
Redhat6 products
- enterprise_linuxEOL7.0
- enterprise_linux_desktop7.0
- enterprise_linux_server7.0
- enterprise_linux_server_aus7.4
- enterprise_linux_server_eus7.4 | 7.5
Alpine1 product
- libxdmcp< 1.1.2-r3
Debian1 product
- libxdmcp< 1:1.1.2-2
Mageia1 product
- libxdmcp< 1.1.1-7.1.mga5
Opensuse1 product
- libXdmcp&distro=openSUSE Tumbleweed< 1.1.3-1.11
Ubuntu1 product
- libxdmcp< 1:1.1.2-3 | < 1:1.1.1-1ubuntu0.1~esm1 | < 1:1.1.2-1.1ubuntu0.1~esm1
X.org1 product
- libxdmcp1.1.2 | < 1.1.2
8 vendors · 24 products
References
21 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2625X Refsource CONFIRMIssue TrackingThird Party Advisory
- cgit.freedesktop.org/xorg/lib/libXdmcp/commit/?id=0554324ec6bbc2071f5d1f8ad211a1643e29eb1fX Refsource CONFIRMThird Party Advisory
- www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/X Refsource MISCExploitThird Party AdvisoryAdvisoryREPORT
