CVEs-PoC/2017/CVE-2017-2626.md

CVE-2017-2626

Description

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.

POC

Reference

• https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/
• https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/nediazla/LinuxFundamentals