Escalation Of Privilege

xrdp 0.9.1 calls the PAM function authstartsession in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pamlimits.so bypass...

Arbitrary Code Execution

xrdp is vulnrerable to arbitrary code execution. The xrdp-sesman service can be crashed via a buffer overflow by connecting over port 3350 and supplying a malicious payload, potentially resulting in arbitrary code execution...

openSUSE Security Update : xrdp (openSUSE-2020-1200)

This update for xrdp fixes the following issues : - Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability bsc1173580: CVE-2020-4044 This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable...

Debian: Security Advisory (DLA-2319-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for xrdp (openSUSE-SU-2020:1200-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1200-1 Security update for xrdp

This update for xrdp fixes the following issues: - Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability bsc1173580: CVE-2020-4044 This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for xrdp (important)

openSUSE Security Update: Security update for xrdp Announcement ID: openSUSE-SU-2020:1200-1 Rating: important References: 1173580 Cross-References: CVE-2020-4044 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for xrdp fixes...

Debian DLA-2319-1 : xrdp security update

xrdp-sesman service in xrdp can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. This will allow them to...

[SECURITY] [DLA 2319-1] xrdp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2319-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 09, 2020 https://wiki.debian.org/LTS -...

DLA-2319-1 xrdp - security update

Bulletin has no description...

SUSE SLED15 / SLES15 Security Update : xrdp (SUSE-SU-2020:2142-1)

This update for xrdp fixes the following issues : Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability bsc1173580: CVE-2020-4044 Note that Tenable Network Security has extracted the preceding description block direct...

SUSE-SU-2020:2142-1 Security update for xrdp

This update for xrdp fixes the following issues: - Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability bsc1173580: CVE-2020-4044...

[SECURITY] Fedora 31 Update: freerdp-2.2.0-1.fc31

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the Fre eRDP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

Debian: Security Advisory (DSA-4737-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4737-1 : xrdp - security update

Ashley Newson discovered that the XRDP sessions manager was susceptible to denial of service. A local attacker can further take advantage of this flaw to impersonate the XRDP sessions manager and capture any user credentials that are submitted to XRDP, approve or reject arbitrary login credential...

[SECURITY] Fedora 32 Update: freerdp-2.2.0-1.fc32

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the Fre eRDP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

[SECURITY] [DSA 4737-1] xrdp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4737-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4737-1] xrdp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4737-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2020 https://www.debian.org/security/faq -...

DSA-4737-1 xrdp - security update

Bulletin has no description...

SUSE SLES12 Security Update : xrdp (SUSE-SU-2020:1991-1)

This update for xrdp fixes the following issues : Security fixes bsc1173580, CVE-2020-4044 : + Add patches : - xrdp-cve-2020-4044-fix-0.patch - xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch : - xrdp-fate318398-change-expired-password.patch Update patch : +...