VDB

GCVE-110-MAGEIA-2017-456

GCVE-110-MAGEIA-2017-456
Advisory Published
Vulnetix · Advisory published December 21, 2017
The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream. (CVE-2017-16927)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaxrdp0 (affected), 0.9.4-1.mga6 (unaffected)—

Aliases

CVE-2017-16927

References

Updated xrdp packages fix security vulnerability
issue
Updated xrdp packages fix security vulnerability
advisory
Updated xrdp packages fix security vulnerability
issue

Browse GCVE Records

74,299 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›