CVE-2021-36158: Medium severity Alpinelinux Aports Alpine vulnerability
In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/xrdpto a version that resolves this vulnerability.Fixed in 0.9.11-r1 - Upgrade
Upgrade
alpine/xrdpto a version that resolves this vulnerability.Fixed in 0.9.15-r1
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-36158.
What is the severity of CVE-2021-36158?
The severity of CVE-2021-36158 is medium (5.9).
What is the affected software for CVE-2021-36158?
The affected software for CVE-2021-36158 is the xrdp package (in branches through 3.14) for Alpine Linux.
What is the risk associated with CVE-2021-36158?
CVE-2021-36158 poses a risk of man-in-the-middle attacks on RDP sessions in Alpine Linux.
Is there a fix available for CVE-2021-36158?
Yes, please refer to the official Alpine Linux Aports repository for the fix to CVE-2021-36158.