MGASA-2017-0456 Updated xrdp packages fix security vulnerability

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

[SECURITY] [DLA 1203-2] xrdp regression update

Package : xrdp Version : 0.5.0-2+deb7u3 A regression was added by the patch introduced in version 0.5.0-2+deb7u2 to fix CVE-2017-16927: xrdp-sesman started to segfault in libscp. For Debian 7 "Wheezy", these problems have been fixed in version 0.5.0-2+deb7u3. We recommend that you upgrade your xr...

DLA-1203-2 xrdp - regression update

Bulletin has no description...

Debian DLA-1203-2 : xrdp regression update

A regression was added by the patch introduced in version 0.5.0-2+deb7u2 to fix CVE-2017-16927: xrdp-sesman started to segfault in libscp. For Debian 7 'Wheezy', these problems have been fixed in version 0.5.0-2+deb7u3. We recommend that you upgrade your xrdp packages. NOTE: Tenable Network...

[SECURITY] [DLA 1203-1] xrdp security update

Package : xrdp Version : 0.5.0-2+deb7u2 CVE ID : CVE-2017-16927 The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly...

DLA-1203-1 xrdp - security update

Bulletin has no description...

Fedora 26 : 1:xrdp (2017-f67f3ffb5d)

Patch CVE-2017-16927. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

Fedora 25 : 1:xrdp (2017-1fb805bfc2)

Patch CVE-2017-16927. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

[SECURITY] Fedora 27 Update: xrdp-0.9.4-2.fc27

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Fedora Update for xrdp FEDORA-2017-f67f3ffb5d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for xrdp FEDORA-2017-b891f919c5

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: xrdp-0.9.4-2.fc26

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

[SECURITY] Fedora 25 Update: xrdp-0.9.4-2.fc25

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Fedora Update for xrdp FEDORA-2017-1fb805bfc2

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : xrdp -- local user can cause a denial of service (a66f9be2-d519-11e7-9866-c85b763a2f96)

xrdp reports : The scpv0saccept function in the session manager uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input stream. %NASLMINLEVEL 70300 C...

xrdp 'scp_v0s_accept' function denial of service vulnerability

xrdp is an open source Remote Desktop Protocol RDP server. A security vulnerability exists in the 'scpv0saccept' function in the esman/libscp/libscpv0.c file in xrdp 0.9.4 and earlier. A local attacker can exploit this vulnerability to cause a denial of service buffer overflow and application cra...

Design/Logic Flaw

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

UBUNTU-CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...

CVE-2017-16927

The scpv0saccept function in sesman/libscp/libscpv0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted input...