Denial Of Service (DoS)

2022-02-1419:31:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

xrdp

vulnerability

denial of service

integer underflow

heap overflow

sesman server

code execution

EPSS

0.001

Percentile

19.8%

JSON

xrdp is vulnerable to denial of service. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root.

References

github.com/neutrinolabs/xrdp/commit/4def30ab8ea445cdc06832a44c3ec40a506a0ffa

github.com/neutrinolabs/xrdp/security/advisories/GHSA-8h98-h426-xf32

lists.fedoraproject.org/archives/list/[email protected]/message/K5ONRGARKHGFU2CIEQ7E6M6VJZEM5XWW/

lists.fedoraproject.org/archives/list/[email protected]/message/U3XGFJNQMNXHBD3J7CBM4YURYEDXROWZ/

secdb.alpinelinux.org/edge/community.yaml

Denial Of Service (DoS)

References

Related