CVE-2022-23479

CRITICO 9.8CVE-2022-23479 · Published 09/12/2022 · updated 17/06/2026

In breve

CVE-2022-23479 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda xrdp (neutrinolabs).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.93%, superiore al 60.5% delle vulnerabilità.
Correzione: aggiornare a 0.9.21 o successiva.

Package	Affected versions	Patched versions
xrdp neutrinolabs	`< 0.9.21`	`0.9.21`

Description

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. Users are advised to upgrade.

References

neutrinolabs/xrdp security advisory · Third Party Advisory
debian.org/security/2023/dsa-5502 · Third Party Advisory

Altre vulnerabilità di xrdp

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

xrdp

neutrinolabs

< 0.9.21

0.9.21

Altre vulnerabilità di xrdp

Vedi tutto →