https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 21:15:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07659 bdu:2023-07659 https://cve.radiocsirt.org/vuln/bdu:2023-07659 https://cve.radiocsirt.org/vuln/euvd-2026-257705 EUVD-2026-257705 https://cve.radiocsirt.org/vuln/euvd-2026-257705 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40184 <p>xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don&#39;t use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p>xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don&#39;t use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40184 https://cve.radiocsirt.org/vuln/gsd-2023-40184 gsd-2023-40184 https://cve.radiocsirt.org/vuln/gsd-2023-40184 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13399-1 <p>libpainter0-0.9.23.1-1.1 on GA media</p> <p>libpainter0-0.9.23.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13399-1 https://cve.radiocsirt.org/vuln/suse-su-2023:3735-1 <p>Security update for xrdp</p> <p>Security update for xrdp</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3735-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40184 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xrdp, Ubuntu:Pro:16.04:LTS: xrdp, Ubuntu:Pro:18.04:LTS: xrdp, Ubuntu:Pro:20.04:LTS: xrdp, Ubuntu:Pro:22.04:LTS: xrdp, Ubuntu:Pro:24.04:LTS: xrdp</p> <p>xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don&#39;t use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xrdp, Ubuntu:Pro:16.04:LTS: xrdp, Ubuntu:Pro:18.04:LTS: xrdp, Ubuntu:Pro:20.04:LTS: xrdp, Ubuntu:Pro:22.04:LTS: xrdp, Ubuntu:Pro:24.04:LTS: xrdp</p> <p>xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don&#39;t use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40184