CVE-2017-6967

moderate-risk

Published 2017-03-17

xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass.

Do I need to act?

0.18% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.3/10 High

NETWORK / LOW complexity

Affected Products (1)

Xrdp

Affected Vendors

Neutrinolabs

References (6)

Third Party Advisory https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1672742

Third Party Advisory https://github.com/neutrinolabs/xrdp/issues/350

Third Party Advisory https://github.com/neutrinolabs/xrdp/pull/694

Third Party Advisory https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1672742

Third Party Advisory https://github.com/neutrinolabs/xrdp/issues/350

Third Party Advisory https://github.com/neutrinolabs/xrdp/pull/694

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal