Security update for xrdp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2142-1 Final 1 1 2020-08-06T09:05:38Z current 2020-08-06T09:05:38Z 2020-08-06T09:05:38Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xrdp This update for xrdp fixes the following issues: - Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability (bsc#1173580): CVE-2020-4044 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2020-2142,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2020-2142,Image SLES15-SP3-EC2-HVM-2020-2142,Image SLES15-SP3-SAP-Azure-2020-2142,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2020-2142,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2020-2142,Image SLES15-SP3-SAP-EC2-HVM-2020-2142,Image SLES15-SP3-SAP-GCE-2020-2142,Image SLES15-SP3-SAPCAL-Azure-2020-2142,Image SLES15-SP3-SAPCAL-EC2-HVM-2020-2142,Image SLES15-SP3-SAPCAL-GCE-2020-2142,Image SLES15-SP4-SAP-2020-2142,Image SLES15-SP4-SAP-Azure-2020-2142,Image SLES15-SP4-SAP-Azure-LI-BYOS-2020-2142,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2020-2142,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2020-2142,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2020-2142,Image SLES15-SP4-SAP-EC2-2020-2142,Image SLES15-SP4-SAP-GCE-2020-2142,Image SLES15-SP4-SAPCAL-2020-2142,Image SLES15-SP4-SAPCAL-Azure-2020-2142,Image SLES15-SP4-SAPCAL-EC2-2020-2142,Image SLES15-SP4-SAPCAL-GCE-2020-2142,Image SLES15-SP5-SAP-Azure-2020-2142,Image SLES15-SP5-SAP-Azure-LI-BYOS-2020-2142,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2020-2142,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2020-2142,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2020-2142,Image SLES15-SP5-SAP-EC2-2020-2142,Image SLES15-SP5-SAP-GCE-2020-2142,Image SLES15-SP5-SAPCAL-Azure-2020-2142,Image SLES15-SP5-SAPCAL-EC2-2020-2142,Image SLES15-SP5-SAPCAL-GCE-2020-2142,SUSE-2020-2142,SUSE-SLE-Module-Basesystem-15-SP2-2020-2142 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202142-1/ Link for SUSE-SU-2020:2142-1 https://lists.suse.com/pipermail/sle-security-updates/2020-August/007230.html E-Mail link for SUSE-SU-2020:2142-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1173580 SUSE Bug 1173580 https://www.suse.com/security/cve/CVE-2020-4044/ SUSE CVE CVE-2020-4044 page Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-EC2-HVM Image SLES15-SP3-SAP-Azure Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-EC2-HVM Image SLES15-SP3-SAP-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE Image SLES15-SP5-SAP-Azure Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-EC2 Image SLES15-SP5-SAP-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE SUSE Linux Enterprise Module for Basesystem 15 SP2 xrdp-0.9.13.1-4.3.1 libpainter0-0.9.13.1-4.3.1 librfxencode0-0.9.13.1-4.3.1 xrdp-devel-0.9.13.1-4.3.1 xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-EC2-HVM xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-SAP-Azure xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-SAP-EC2-HVM xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-SAP-GCE xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-SAPCAL-Azure xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP3-SAPCAL-GCE xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAP xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAP-Azure xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAP-EC2 xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAP-GCE xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAPCAL xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAPCAL-Azure xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAPCAL-EC2 xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP4-SAPCAL-GCE xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAP-Azure xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAP-EC2 xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAP-GCE xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAPCAL-Azure xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAPCAL-EC2 xrdp-0.9.13.1-4.3.1 as a component of Image SLES15-SP5-SAPCAL-GCE libpainter0-0.9.13.1-4.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 librfxencode0-0.9.13.1-4.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 xrdp-0.9.13.1-4.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 xrdp-devel-0.9.13.1-4.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. This will allow them to capture any user credentials that are submitted to XRDP and approve or reject arbitrary login credentials. For xorgxrdp sessions in particular, this allows an unauthorized user to hijack an existing session. This is a buffer overflow attack, so there may be a risk of arbitrary code execution as well. CVE-2020-4044 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:xrdp-0.9.13.1-4.3.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-EC2-HVM:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-SAP-Azure:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-SAP-EC2-HVM:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-SAP-GCE:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-SAPCAL-Azure:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-SAPCAL-EC2-HVM:xrdp-0.9.13.1-4.3.1 Image SLES15-SP3-SAPCAL-GCE:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAP-Azure:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAP-EC2:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAP-GCE:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAP:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAPCAL-Azure:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAPCAL-EC2:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAPCAL-GCE:xrdp-0.9.13.1-4.3.1 Image SLES15-SP4-SAPCAL:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAP-Azure:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAP-EC2:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAP-GCE:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAPCAL-Azure:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAPCAL-EC2:xrdp-0.9.13.1-4.3.1 Image SLES15-SP5-SAPCAL-GCE:xrdp-0.9.13.1-4.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libpainter0-0.9.13.1-4.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:librfxencode0-0.9.13.1-4.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xrdp-0.9.13.1-4.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xrdp-devel-0.9.13.1-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202142-1/ https://www.suse.com/security/cve/CVE-2020-4044.html CVE-2020-4044 https://bugzilla.suse.com/1173580 SUSE Bug 1173580