Vulnerability in xrdp package - Buffer Overflow and Application Crash
Summary
DLA-1203-1: xrdp - security update. Affects xrdp versions < 0.5.0-2+deb7u2. Fixed in 0.5.0-2+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The xrdp package is a session manager that provides remote desktop functionality for Linux systems. It allows users to connect to a remote desktop environment using the Remote Desktop Protocol (RDP). The package includes the sesman component, which handles session management and authentication. However, a vulnerability has been discovered in the scp_v0s_accept function within the libscp_v0.c file of sesman. This function uses an untrusted integer as a write length, which can be exploited by local users to cause a denial of service (buffer overflow and application crash) or potentially have other unspecified impacts.
Vulnerability Detail
The vulnerability in xrdp arises from the scp_v0s_accept function's improper handling of write lengths. By providing a crafted input stream, a local user can trigger a buffer overflow, leading to a denial of service condition or other unknown consequences. This vulnerability can be exploited without requiring any special privileges or authentication. It is important to note that this vulnerability only affects the xrdp package in Debian 7 Wheezy.
How To Fix
Minimum fixed version
0.5.0-2+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade xrdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided security update to ensure the system is protected against potential exploitation.
Conclusion
The xrdp package in Debian 7 Wheezy is vulnerable to a buffer overflow and application crash due to improper handling of write lengths in the scp_v0s_accept function. To mitigate this vulnerability, it is recommended to upgrade the xrdp package to version 0.5.0-2+deb7u2 or later. There are no known workarounds, so applying the security update is crucial. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for xrdp →
FAQ
xrdp is a session manager that enables remote desktop functionality on Linux systems. It allows users to connect to a remote desktop environment using the Remote Desktop Protocol (RDP).
This vulnerability affects the xrdp package in Debian 7 Wheezy. It can be exploited by local users to cause a denial of service (buffer overflow and application crash) or potentially have other unspecified impacts.
No, this vulnerability can only be exploited by local users.
No, there are no known workarounds for this vulnerability. It is crucial to apply the provided security update.
The security update for the xrdp package can be obtained from the Debian repository. Users can install it using their preferred package manager.
Related vulnerabilities
Recent vulnerabilities recorded for xrdp.
