[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fugziBW6Uz7gis80nwJqW3-rdzhmi8vCvBzKJPYy8X-8":3,"g5a-risk:CVE-2017-2625":186},{"success":4,"data":5,"meta":184},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":15,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":81,"references":82,"referencesCount":81,"weaknesses":118,"weaknessesCount":127,"isActivelyExploited":128,"cisaInfo":15,"otxData":15,"relatedBlogPosts":129,"seoMetadata":130,"configurations":155,"relatedVendorCves":182,"notableEvents":183},"CVE-2017-2625","What is CVE-2017-2625?","It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.","It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could...","2018-07-27T18:29:00.86","2023-02-12T23:29:15.727",5.5,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":39,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",1.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"secalert@redhat.com","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":35,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N","CHANGED",6.5,2,4,[40],{"Source":18,"Type":19,"CVSSData":41,"BaseSeverity":23,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":42,"VectorString":43,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":44,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":45,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00534,[48,48,48,48,48,48,48],"Medium",[52,57,62,65,68,72,75,78],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"x.org","libxdmcp","*","cpe:2.3:a:x.org:libxdmcp:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"redhat","enterprise_linux","7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",{"vendor":58,"product":63,"version":60,"criteria":64,"vulnerable":4},"enterprise_linux_desktop","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":58,"product":66,"version":60,"criteria":67,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":58,"product":69,"version":70,"criteria":71,"vulnerable":4},"enterprise_linux_server_aus","7.4","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",{"vendor":58,"product":73,"version":70,"criteria":74,"vulnerable":4},"enterprise_linux_server_eus","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",{"vendor":58,"product":73,"version":76,"criteria":77,"vulnerable":4},"7.5","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",{"vendor":58,"product":79,"version":60,"criteria":80,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",8,[83,89,93,97,101,105,109,113],{"url":84,"source":85,"tags":86},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F96480","Securityfocus",[87,88],"Third Party Advisory","VDB Entry",{"url":90,"source":91,"tags":92},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1037919","Securitytracker",[87,88],{"url":94,"source":95,"tags":96},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1865","Red Hat",[87],{"url":98,"source":95,"tags":99},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2017-2625",[100,87],"Issue Tracking",{"url":102,"source":103,"tags":104},"https:\u002F\u002Fcgit.freedesktop.org\u002Fxorg\u002Flib\u002FlibXdmcp\u002Fcommit\u002F?id=0554324ec6bbc2071f5d1f8ad211a1643e29eb1f","Freedesktop",[87],{"url":106,"source":107,"tags":108},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F11\u002Fmsg00024.html","Debian",[],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201704-03","Gentoo",[87],{"url":114,"source":115,"tags":116},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2017-001-xorg\u002F","X41-dsec",[117,87],"Exploit",[119],{"id":120,"name":121,"description":122,"extendedDescription":123,"status":124,"abstraction":125,"structure":126},"CWE-331","Insufficient Entropy","The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.","","Draft","Base","Simple",1,false,[],{"title":131,"metaDescription":132,"keywords":133,"canonicalUrl":134,"structuredData":135},"What is CVE-2017-2625? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-2625, a medium severity cyber security vulnerability from 2018. It was discovered that libXdmcp before 1.1.2 including use...","CVE-2017-2625, CVE-2017-2625 vulnerability, CVE-2017-2625 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, x.org security, redhat security, libxdmcp vulnerability, enterprise_linux vulnerability, enterprise_linux_desktop vulnerability, enterprise_linux_server vulnerability, enterprise_linux_server_aus vulnerability","\u002Fwhat-is\u002Fcve-2017-2625",{"@context":136,"@type":137,"headline":131,"description":132,"datePublished":10,"dateModified":11,"author":138,"publisher":142,"about":146,"mainEntityOfPage":150,"articleSection":153,"keywords":154},"https:\u002F\u002Fschema.org","TechArticle",{"@type":139,"name":140,"url":141},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":139,"name":140,"url":141,"logo":143},{"@type":144,"url":145},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":147,"name":6,"description":148,"additionalType":149},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":151,"@id":152},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-2625","Cybersecurity","CVE-2017-2625, CVE-2017-2625 vulnerability, CVE-2017-2625 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[156,164],{"Operator":15,"Negate":15,"Nodes":157},[158],{"Operator":159,"Negate":15,"CPEMatch":160},"OR",[161],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":163,"VersionEndIncluding":15},"E0896D7E-B141-40BB-A78B-7BB07F46830D","1.1.2",{"Operator":15,"Negate":15,"Nodes":165},[166],{"Operator":159,"Negate":15,"CPEMatch":167},[168,170,172,174,176,178,180],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":169,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":171,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":175,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D99A687E-EAE6-417E-A88E-D0082BC194CD",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":177,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":179,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":181,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"825ECE2D-E232-46E0-A047-074B34DB1E97",[],[],{"lastModified":11,"cacheTime":185,"version":42},1792265553406,{"score":187,"band":50,"action":188,"scoredAt":189},46,"Plan remediation","2026-10-16T06:44:39.030772+00:00"]