https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T02:18:41.771904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-6967 CVE-2017-6967 2026-10-22T02:18:41.773664+00:00

xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass.

 https://cve.radiocsirt.org/vuln/usn-4815-1 USN-4815-1 — xrdp vulnerabilities 2026-10-22T02:18:41.773717+00:00

Affected: Ubuntu:Pro:14.04:LTS: xrdp, Ubuntu:Pro:16.04:LTS: xrdp

It was discovered that xrdp did not properly validate certain input in the session manager. A local attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2017-16927)

It was discovered that xrdp did not properly initialize PAM session modules. A remote attacker could possibly use this issue to escalate privileges. (CVE-2017-6967)