NA

CVE-2022-23479

Published: 09/12/2022 Updated: 24/10/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. Users are advised to upgrade.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

neutrinolabs xrdp

debian debian linux 11.0

Vendor Advisories

Debian Bug report logs - #1025879 xrdp: CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483 CVE-2022-23484 CVE-2022-23493 Package: src:xrdp; Maintainer for src:xrdp is Debian Remote Maintainers &lt;debian-remote@listsdebianorg&gt;; Reported by: Salvatore Bonaccor ...
Multiple security vulnerabilities have been found in xrdp, a remote desktop protocol server Buffer overflows and out-of-bound writes may cause a denial of service or other unspecified impact For the oldstable distribution (bullseye), these problems have been fixed in version 09211-1~deb11u1 We recommend that you upgrade your xrdp packages Fo ...

Github Repositories

Introduction 이 README에서는 xrdp-chansrv에서 발견한 취약점 하나 (CVE-2022-23480)와, xrdp에서 발견한 취약점 2개(CVE-2022-23483, CVE-2022-23479)를 소개하고, 이를 이용해 Privilege Escalation까지 도달한 과정을 설명할 것이다 What is xrdp? xrdp는 오픈소스로 운영되는 RDP 서버이다 UNIX-like OS에서 RDP server를 구현