| Package | Affected versions | Patched versions |
|---|---|---|
| xrdp | = 0.9.1 |
xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pam_limits.so bypass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free