Integer overflow

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Integer Overflow in xrdpmmprocessrailupdatewindowtext function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23477 Buffer Overflow in xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in audinsendopen function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23483

CVE-2022-23483 affects xrdp prior to version 0.9.21. An Out of Bound Read exists in libxrdp_send_to_channel(). No workarounds are documented in the connected sources. Debian and Alpine advisories, Astra Linux bulletin, and Fedora/ALT Linux entries indicate the fix is to upgrade to a version where...

CVE-2022-23483 Out-of-Bound Read in libxrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23483

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23483

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23482 Out-of-Bound Read in xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpsecprocessmcsdataCSCORE function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23482

CVE-2022-23482 affects the xrdp server: prior to version 0.9.21, it contains an out-of-bounds read in the function xrdp_sec_process_mcs_data_CS_CORE(). Upgrading is recommended to mitigate the vulnerability; multiple advisories note fixes in 0.9.21 (and later) across Debian, Alpine, and other dis...

CVE-2022-23481

CVE-2022-23481 affects xrdp prior to version 0.9.21, due to an out-of-bounds read in the function xrdp_caps_process_confirm_active(). The issue is fixed in later releases (e.g., 0.9.21 and subsequent distro patches such as 0.9.21.1-1~deb11u1 and Fedora/Alt/Linux updates). Impact is described as h...

CVE-2022-23481

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpcapsprocessconfirmactive function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23481 Out-of-Bound Read in xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpcapsprocessconfirmactive function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23480

CVE-2022-23480 affects the xrdp project, with a buffer overflow in the devredir_proc_client_devlist_announce_req() function present in older releases (before 0.9.21). Multiple connected sources confirm the issue in xrdp and indicate the vulnerability can impact remote-desktop exposure; Debian sec...

CVE-2022-23479 Buffer Overflow occurs in xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in xrdpmmchandatain function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23478

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Write in xrdpmmtransprocessdrdynvcchannelopen function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23478

CVE-2022-23478 affects xrdp before v0.9.21. The vulnerability is an Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open(), with no known workaround documented. Impact details are not expanded in the connected sources beyond the write out-of-bounds condition. The recommended remediati...

CVE-2022-23493

CVE-2022-23493 affects xrdp prior to v0.9.21. It is an Out-of-Bounds Read in xrdp_mm_trans_process_drdynvc_channel_close(). There are no known workarounds in the provided docs; upgrade to a fixed release is advised. Connected advisories note this is among multiple fixes for xrdp and list related ...

CVE-2022-23480: Buffer Copy without Checking Size of Input

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in devredirprocclientdevlistannouncereq function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23478: Out-of-bounds Write

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Write in xrdpmmtransprocessdrdynvcchannelopen function. There are no known workarounds for this issue. Users are advised to upgrade...

Multiple Ransomware groups targets open RDP Ports

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Many ransomware attacks are being launched against exposed Remote Desktop services by Threat Actors. At present, five ransomware families are attacking open RDP ports...

Cuba Ransomware Extorted Over $60 Million in Ransom Fees from More than 100 Entities

The threat actors behind Cuba aka COLDDRAW ransomware have received more than $60 million in ransom payments and compromised over 100 entities across the world as of August 2022. In a new advisory shared by the U.S. Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of...