{"action":"Upgrade xrdp to 0.9.1-9 or later.","affected":[{"fixed":"0.9.1-9","introduced":"0"}],"component":"xrdp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.9.1-9"],"id":"tcs_01M5NCJA884HRJTNST9ZVM01C0","modified_at":"2026-09-01T20:03:49.529609476Z","published_at":"2017-03-17T09:59:00.413Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-6967","https://security-tracker.debian.org/tracker/CVE-2017-6967"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-6967#Debian:13/xrdp","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-6967"}],"summary":"xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations"}