Key management errors in xcmsdb - CVE-2017-2625

Vulnerability identifier: #VU32096

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-2625

CWE-ID: CWE-320

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local authenticated user to gain access to sensitive information.

It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.

xcmsdb
Tanzu Greenplum for Kubernetes
Gentoo Linux
Ubuntu
Fedora
libxdmcp (Alpine package)
libxdmcp6 (Ubuntu package)
libXdmcp
VMware Tanzu Operations Manager

Install update from vendor's website.

xcmsdb - update to 1.1.2
libxdmcp (Alpine package) - update to 1.1.2-r3
libxdmcp6 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libXdmcp - addressed in versions 1.1.2-5.fc24, 1.1.2-5.fc25, 1.1.2-5.fc26
Tanzu Greenplum for Kubernetes - update to 2.0.0
VMware Tanzu Operations Manager - addressed in versions 2.7.25, 2.8.16, 2.9.12, 2.10.39

• http://www.securityfocus.com/bid/96480
• http://www.securitytracker.com/id/1037919
• https://access.redhat.com/errata/RHSA-2017:1865
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2625
• https://cgit.freedesktop.org/xorg/lib/libXdmcp/commit/?id=0554324ec6bbc2071f5d1f8ad211a1643e29eb1f
• https://lists.debian.org/debian-lts-announce/2019/11/msg00024.html
• https://security.gentoo.org/glsa/201704-03
• https://www.x41-dsec.de/lab/advisories/x41-2017-001-xorg/

• Key management errors in xorg.freedesktop xcmsdb
• Key management errors in libxdmcp (Alpine package)
• Gentoo update for X.Org
• Ubuntu update for libxdmcp
• VMware Tanzu products update for libXdmcp
• Fedora 24 update for libXdmcp
• Fedora 25 update for libXdmcp
• Fedora 26 update for libXdmcp