[SECURITY] [DLA 1203-1] xrdp security update

Package : xrdp Version : 0.5.0-2+deb7u2 CVE ID : CVE-2017-16927 The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly...

DLA-1203-1 xrdp - security update

Bulletin has no description...

Fedora 26 : 1:xrdp (2017-f67f3ffb5d)

Patch CVE-2017-16927. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Fedora 25 : 1:xrdp (2017-1fb805bfc2)

Patch CVE-2017-16927. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

[SECURITY] Fedora 27 Update: xrdp-0.9.4-2.fc27

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Fedora Update for xrdp FEDORA-2017-b891f919c5

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for xrdp FEDORA-2017-f67f3ffb5d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: xrdp-0.9.4-2.fc26

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

[SECURITY] Fedora 25 Update: xrdp-0.9.4-2.fc25

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Fedora Update for xrdp FEDORA-2017-1fb805bfc2

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : xrdp -- local user can cause a denial of service (a66f9be2-d519-11e7-9866-c85b763a2f96)

xrdp reports : The scpv0saccept function in the session manager uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input stream. %NASLMINLEVEL 70300 C...

xrdp 'scp_v0s_accept' function denial of service vulnerability

xrdp is an open source Remote Desktop Protocol RDP server. A security vulnerability exists in the 'scpv0saccept' function in the esman/libscp/libscpv0.c file in xrdp 0.9.4 and earlier. A local attacker can exploit this vulnerability to cause a denial of service buffer overflow and application cra...

Design/Logic Flaw

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

DEBIAN-CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

UBUNTU-CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

CVE-2017-16927

CVE-2017-16927 affects xrdp (sesman) where scp_v0s_accept in sesman/libscp/libscp_v0.c uses an untrusted integer as a write length, enabling local denial of service via buffer overflow. Public records (Fedora 26/27, SUSE, Mageia) show this was fixed by upstream in 0.9.4 (and later 0.9.5 in some b...

CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...