| Package | Affected versions | Patched versions |
|---|---|---|
| libice | ≤ 1.0.9 |
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free