ALT-PU-2018-2967-1
Closed vulnerabilities
Published: 2017-11-23
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-16927
The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream.
Severity: HIGH (8.4)
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- https://github.com/neutrinolabs/xrdp/pull/958
- https://github.com/neutrinolabs/xrdp/pull/958
- https://groups.google.com/forum/#%21topic/xrdp-devel/PmVfMuy_xBA
- https://groups.google.com/forum/#%21topic/xrdp-devel/PmVfMuy_xBA
- [debian-lts-announce] 20171211 [SECURITY] [DLA 1203-1] xrdp security update
- [debian-lts-announce] 20171211 [SECURITY] [DLA 1203-1] xrdp security update