Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-1487

Высокий

ALT-PU-2018-1487: package xrdp update to version 0.9.6-alt1

Источник
errata.altlinux.org
Дата публикации
26.03.2018
Дата обновления
26.03.2018
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades xrdp to version 0.9.6-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 8.4
ubuntu
почти 9 лет назад

The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream.

CVSS3: 8.4
nvd
почти 9 лет назад

The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream.

CVSS3: 8.4
debian
почти 9 лет назад

The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the sessio ...

CVSS3: 8.4
github
больше 4 лет назад

The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream.

suse-cvrf
больше 7 лет назад

Security update for xrdp