Vulnerability in xrdp - security update
Summary
DLA-872-1: xrdp - security update. Affects xrdp versions < 0.5.0-2+deb7u1. Fixed in 0.5.0-2+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
xrdp is a Remote Desktop Protocol (RDP) server that allows users to remotely access their desktop environments. It provides a bridge between the RDP client and the desktop environment running on the server. This vulnerability affects xrdp in Debian 7 Wheezy.
Vulnerability Detail
The vulnerability in xrdp is related to the incorrect location of the PAM function auth_start_session(). This leads to PAM session modules not being properly initialized, which can result in incorrect configurations or elevation of privileges. This vulnerability is known as a pam_limits.so bypass. It has the potential to allow unauthorized access or manipulation of the system.
How To Fix
Minimum fixed version
0.5.0-2+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade xrdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in xrdp can be fixed by upgrading the package to the recommended version. It is important to promptly apply the security update to ensure the system is protected against potential unauthorized access or privilege escalation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for xrdp →
FAQ
xrdp is a Remote Desktop Protocol (RDP) server that allows users to remotely access their desktop environments.
This vulnerability can lead to incorrect configurations or elevation of privileges, potentially allowing unauthorized access or manipulation of the system.
This vulnerability affects xrdp in Debian 7 Wheezy.
To fix this vulnerability, upgrade the xrdp package to version 0.5.0-2+deb7u1 or later.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for xrdp.
