[Git][security-tracker-team/security-tracker][master] Add CVE-2020-4044/xrdp

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6cb7b509 by Salvatore Bonaccorso at 2020-07-08T22:25:29+02:00
Add CVE-2020-4044/xrdp

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29762,7 +29762,9 @@ CVE-2020-4051 (In Dijit before versions 1.11.11, and greater than or equal to 1.
 CVE-2020-4045 (SSB-DB version 20.0.0 has an information disclosure vulnerability. The ...)
 	NOT-FOR-US: SSB-DB
 CVE-2020-4044 (The xrdp-sesman service before version 0.9.13.1 can be crashed by conn ...)
-	TODO: check
+	- xrdp <unfixed>
+	NOTE: https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-j9fv-6fwf-p3g4
+	NOTE: Fixed by: https://github.com/neutrinolabs/xrdp/commit/e593f58a82bf79b556601ae08e9e25e366a662fb
 CVE-2020-4043 (phpMussel from versions 1.0.0 and less than 1.6.0 has an unserializati ...)
 	NOT-FOR-US: phpMussel
 CVE-2020-4042



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6cb7b509475b4777058fd92af4b9856f028b284b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6cb7b509475b4777058fd92af4b9856f028b284b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200708/f25b0f1e/attachment.html>