CVE-2022-23613
published 2022-02-07CVE-2022-23613: xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows…
PriorityP344high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.48%
38.1th percentile
xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xrdp | < xrdp 0.9.17-2.1 (bookworm) | xrdp 0.9.17-2.1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| neutrinolabs | xrdp | — | — |
| neutrinolabs | xrdp | — | — |
| neutrinolabs | xrdp | — | — |
| neutrinolabs | xrdp | >= 0 < 0.9.17-2.1 | 0.9.17-2.1 |
| neutrinolabs | xrdp | >= 0 < 0.9.17-2.1 | 0.9.17-2.1 |
| neutrinolabs | xrdp | >= 0 < 0.9.17-2.1 | 0.9.17-2.1 |
| neutrinolabs | xrdp | >= 0 < 0.6.0-1ubuntu0.1+esm3 | 0.6.0-1ubuntu0.1+esm3 |
| neutrinolabs | xrdp | >= 0 < 0.6.1-2ubuntu0.3+esm3 | 0.6.1-2ubuntu0.3+esm3 |
| neutrinolabs | xrdp | >= 0 < 0.9.5-2ubuntu0.1~esm2 | 0.9.5-2ubuntu0.1~esm2 |
| neutrinolabs | xrdp | >= 0 < 0.9.12-1ubuntu0.1+esm1 | 0.9.12-1ubuntu0.1+esm1 |
| neutrinolabs | xrdp | >= 0 < 0.9.17-2ubuntu2+esm1 | 0.9.17-2ubuntu2+esm1 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv9.8CRITICAL
vendor_debian7.8HIGH
vendor_ubuntu6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
xrdp vulnerabilities
osv·2023-11-08·CVSS 9.8
CVE-2022-23479 [CRITICAL] xrdp vulnerabilities
xrdp vulnerabilities
It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds reads. An attacker
could possibly use this issue to crash the program or extract sensitive
information. (CVE-2022-23479, CVE-2022-23481, CVE-2022-23483,
CVE-2023-42822)
It was discovered that xrdp improperly handled session establishment
errors. An attacker could potentially use this issue to bypass the
OS-level session restrictions by PAM. (CVE-2023-40184)
It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds writes. An attacker
could possibly use this issue to cause memory corruption or execute
arbitrary code. This issue only affected Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS and Ubuntu 22.04
OSV
CVE-2022-23613: xrdp is an open source remote desktop protocol (RDP) server
osv·2022-02-07·CVSS 7.8
CVE-2022-23613 [HIGH] CVE-2022-23613: xrdp is an open source remote desktop protocol (RDP) server
xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.
Ubuntu
xrdp vulnerabilities
vendor_ubuntu·2023-11-08·CVSS 6.5
CVE-2022-23468 [MEDIUM] xrdp vulnerabilities
Title: xrdp vulnerabilities
Summary: Several security issues were fixed in xrdp.
It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds reads. An attacker
could possibly use this issue to crash the program or extract sensitive
information. (CVE-2022-23479, CVE-2022-23481, CVE-2022-23483,
CVE-2023-42822)
It was discovered that xrdp improperly handled session establishment
errors. An attacker could potentially use this issue to bypass the
OS-level session restrictions by PAM. (CVE-2023-40184)
It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds writes. An attacker
could possibly use this issue to cause memory corruption or execute
arbitrary code. This issue only
Debian
CVE-2022-23613: xrdp - xrdp is an open source remote desktop protocol (RDP) server. In affected version...
vendor_debian·2022·CVSS 7.8
CVE-2022-23613 [HIGH] CVE-2022-23613: xrdp - xrdp is an open source remote desktop protocol (RDP) server. In affected version...
xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.
Scope: local
bookworm: resolved (fixed in 0.9.17-2.1)
bullseye: resolved
forky: resolved (fixed in 0.9.17-2.1)
sid: resolved (fixed in 0.9.17-2.1)
trixie: resolved (fixed in 0.9.17-2.1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/neutrinolabs/xrdp/commit/4def30ab8ea445cdc06832a44c3ec40a506a0ffahttps://github.com/neutrinolabs/xrdp/security/advisories/GHSA-8h98-h426-xf32https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5ONRGARKHGFU2CIEQ7E6M6VJZEM5XWW/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3XGFJNQMNXHBD3J7CBM4YURYEDXROWZ/https://github.com/neutrinolabs/xrdp/commit/4def30ab8ea445cdc06832a44c3ec40a506a0ffahttps://github.com/neutrinolabs/xrdp/security/advisories/GHSA-8h98-h426-xf32https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5ONRGARKHGFU2CIEQ7E6M6VJZEM5XWW/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3XGFJNQMNXHBD3J7CBM4YURYEDXROWZ/
2022-02-07
Published