CVE-2023-42822

🗓️ 27 Sep 2023 17:55:02Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 98 Views

xrdp font glyph handling allows out-of-bounds read, leading to potential privilege escalatio

Reporter	Title	Published	Views	Family All 50
FreeBSD	xrdp -- unchecked access to font glyph info	27 Sep 202300:00	–	freebsd
AlpineLinux	CVE-2023-42822	27 Sep 202317:55	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в xrdp	20 May 202605:53	–	astralinux
Circl	CVE-2023-42822	27 Sep 202322:36	–	circl
CNNVD	xrdp buffer error vulnerability	27 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-42822 Unchecked access to font glyph info in xrdp	27 Sep 202317:55	–	cvelist
Debian	[SECURITY] [DLA 4166-1] xrdp security update	16 May 202515:06	–	debian
Debian CVE	CVE-2023-42822	27 Sep 202317:55	–	debiancve
Tenable Nessus	Debian dla-4166 : xrdp - security update	16 May 202500:00	–	nessus
Tenable Nessus	Fedora 38 : xrdp (2023-0ce6a8afe5)	6 Oct 202300:00	–	nessus

NVD

Vulners

Node

neutrinolabs xrdpRange<0.9.23.1

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

[
  {
    "vendor": "neutrinolabs",
    "product": "xrdp",
    "versions": [
      {
        "version": "< 0.9.23.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/RTXODUR4ILM7ZPA6ZGY6VSK4BBSBMKGY/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/5FPGA4M7IYCP7OILDF2ZJEVSXUOFEFQ6/
github	www.github.com/neutrinolabs/xrdp/commit/73acbe1f7957c65122b00de4d6f57a8d0d257c40
github	www.github.com/neutrinolabs/xrdp/security/advisories/GHSA-2hjx-rm4f-r9hw
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PFGL22QQF65OIZRMCKUZCVJQCKGUBRYE/
lists	www.lists.debian.org/debian-lts-announce/2025/05/msg00018.html

03 Nov 2025 20:16Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.14.6 - 6.5

EPSS0.00309

SSVC

CWE-125