Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-23478
HistoryDec 09, 2022 - 6:15 p.m.

Design/Logic Flaw

2022-12-0918:15:00
PRIOn knowledge base
www.prio-n.com
xrdp
out of bound write
drdynvc_channel_open
security flaw
upgrade

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.8%

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarounds for this issue. Users are advised to upgrade.

CPENameOperatorVersion
debian_linuxeq11.0
xrdplt0.9.21