Debian Xrdp vulnerabilities

CVE-2023-40184 [LOW] CVE-2023-40184: xrdp - xrdp is an open source remote desktop protocol (RDP) server. In versions prior t... xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc

CVE-2017-16927 [HIGH] CVE-2017-16927: xrdp - The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager ... The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted input stream. Scope: local bookworm: resolved (fixed in 0.9.4-3) bullseye: