Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:libice:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductLibice (9c246ba4-0553-554a-b6e2-299a0b4a54f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libice purl2cpe 2026-06-01 10:14:04.203905
pkg:deb/ubuntu/libice purl2cpe 2026-06-01 10:14:04.203909
pkg:github/freedesktop/libice purl2cpe 2026-06-01 10:14:04.203912
pkg:gitlab/redhat/libice purl2cpe 2026-06-01 10:14:04.203914
pkg:rpm/centos/libice purl2cpe 2026-06-01 10:14:04.203917
pkg:rpm/fedora/libice purl2cpe 2026-06-01 10:14:04.203920
pkg:rpm/opensuse/libice purl2cpe 2026-06-01 10:14:04.203923

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-2626 vulnerable 2026-06-03 14:37:07.840728 Details available
MEDIUM (5.2)
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
Published: 2018-07-27T19:00:00.000Z
Updated: 2024-08-05T14:02:06.904Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.