CVE-2023-40184
published 2023-08-30CVE-2023-40184: xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing…
PriorityP334medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.73%
49.6th percentile
xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xrdp | < xrdp 0.9.21.1-1+deb12u1 (bookworm) | xrdp 0.9.21.1-1+deb12u1 (bookworm) |
| neutrinolabs | xrdp | < 0.9.23 | 0.9.23 |
| neutrinolabs | xrdp | >= 0 < 0.9.21.1-1~deb11u2 | 0.9.21.1-1~deb11u2 |
| neutrinolabs | xrdp | >= 0 < 0.9.21.1-1+deb12u1 | 0.9.21.1-1+deb12u1 |
| neutrinolabs | xrdp | >= 0 < 0.9.24-2 | 0.9.24-2 |
| neutrinolabs | xrdp | >= 0 < 0.9.24-2 | 0.9.24-2 |
| neutrinolabs | xrdp | >= 0 < 0.6.0-1ubuntu0.1+esm3 | 0.6.0-1ubuntu0.1+esm3 |
| neutrinolabs | xrdp | >= 0 < 0.6.1-2ubuntu0.3+esm3 | 0.6.1-2ubuntu0.3+esm3 |
| neutrinolabs | xrdp | >= 0 < 0.9.5-2ubuntu0.1~esm2 | 0.9.5-2ubuntu0.1~esm2 |
| neutrinolabs | xrdp | >= 0 < 0.9.12-1ubuntu0.1+esm1 | 0.9.12-1ubuntu0.1+esm1 |
| neutrinolabs | xrdp | >= 0 < 0.9.17-2ubuntu2+esm1 | 0.9.17-2ubuntu2+esm1 |
| ubuntu | xrdp | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv9.8CRITICAL
vendor_ubuntu6.5MEDIUM
vendor_debian2.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
xrdp vulnerabilities
vendor_ubuntu·2026-06-25·CVSS 6.5
CVE-2023-40184 [MEDIUM] xrdp vulnerabilities
Title: xrdp vulnerabilities
Summary: Several security issues were fixed in xrdp.
It was discovered that xrdp incorrectly handled bounds checking when
processing user domain information during the connection sequence. An
unauthenticated remote attacker could use this issue to cause xrdp to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2025-68670)
It was discovered that xrdp did not correctly enforce the maximum number of
login attempts configured by the MaxLoginRetry parameter. A remote attacker
could use this issue to perform an unlimited number of login attempts.
(CVE-2024-39917)
It was discovered that xrdp did not perform bounds checking when accessing
font glyphs. Since some of this data is controllable by the user, a remote
attacker could use thi
Ubuntu
xrdp vulnerabilities
vendor_ubuntu·2023-11-08·CVSS 6.5
CVE-2022-23468 [MEDIUM] xrdp vulnerabilities
Title: xrdp vulnerabilities
Summary: Several security issues were fixed in xrdp.
It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds reads. An attacker
could possibly use this issue to crash the program or extract sensitive
information. (CVE-2022-23479, CVE-2022-23481, CVE-2022-23483,
CVE-2023-42822)
It was discovered that xrdp improperly handled session establishment
errors. An attacker could potentially use this issue to bypass the
OS-level session restrictions by PAM. (CVE-2023-40184)
It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds writes. An attacker
could possibly use this issue to cause memory corruption or execute
arbitrary code. This issue only
Debian
CVE-2023-40184: xrdp - xrdp is an open source remote desktop protocol (RDP) server. In versions prior t...
vendor_debian·2023·CVSS 2.6
CVE-2023-40184 [LOW] CVE-2023-40184: xrdp - xrdp is an open source remote desktop protocol (RDP) server. In versions prior t...
xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.
Scope: local
bookworm: resolved (fixed in 0.9.21.1-1+deb12u1)
bullseye: resolved (fixed in 0.9.21.1-1~deb11u2)
forky: resolved (fixed in 0.9.24-2)
sid: resolved (fixed in 0.9.24-2)
tri
OSV
xrdp vulnerabilities
osv·2023-11-08·CVSS 9.8
CVE-2022-23479 [CRITICAL] xrdp vulnerabilities
xrdp vulnerabilities
It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds reads. An attacker
could possibly use this issue to crash the program or extract sensitive
information. (CVE-2022-23479, CVE-2022-23481, CVE-2022-23483,
CVE-2023-42822)
It was discovered that xrdp improperly handled session establishment
errors. An attacker could potentially use this issue to bypass the
OS-level session restrictions by PAM. (CVE-2023-40184)
It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds writes. An attacker
could possibly use this issue to cause memory corruption or execute
arbitrary code. This issue only affected Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS and Ubuntu 22.04
OSV
CVE-2023-40184: xrdp is an open source remote desktop protocol (RDP) server
osv·2023-08-30·CVSS 6.5
CVE-2023-40184 [MEDIUM] CVE-2023-40184: xrdp is an open source remote desktop protocol (RDP) server
xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.
No detection rules found.
No public exploits indexed.
https://github.com/neutrinolabs/xrdp/blame/9bbb2ec68f390504c32f2062847aa3d821a0089a/sesman/sesexec/session.c#L571C5-L571C19https://github.com/neutrinolabs/xrdp/commit/a111a0fdfe2421ef600e40708b5f0168594cfb23https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-f489-557v-47jqhttps://lists.fedoraproject.org/archives/list/[email protected]/message/SOT237TIHTHPX5YNIWLVNINOEYC7WMG2/https://lists.fedoraproject.org/archives/list/[email protected]/message/U5IXMQODV3OIJ7DRQBUQV7PUKNT7SH36/https://lists.fedoraproject.org/archives/list/[email protected]/message/URO3FKTFBPNKFARAQBEJLI4MH6YS35P5/https://github.com/neutrinolabs/xrdp/blame/9bbb2ec68f390504c32f2062847aa3d821a0089a/sesman/sesexec/session.c#L571C5-L571C19https://github.com/neutrinolabs/xrdp/commit/a111a0fdfe2421ef600e40708b5f0168594cfb23https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-f489-557v-47jqhttps://lists.debian.org/debian-lts-announce/2025/05/msg00018.htmlhttps://lists.fedoraproject.org/archives/list/[email protected]/message/SOT237TIHTHPX5YNIWLVNINOEYC7WMG2/https://lists.fedoraproject.org/archives/list/[email protected]/message/U5IXMQODV3OIJ7DRQBUQV7PUKNT7SH36/https://lists.fedoraproject.org/archives/list/[email protected]/message/URO3FKTFBPNKFARAQBEJLI4MH6YS35P5/
2023-08-30
Published