Lucene search
+L

820 matches found

OpenVAS
OpenVAS
added 2023/12/15 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2023:4873-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.00728EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/12/15 12:0 a.m.31 views

SUSE SLES12 Security Update : xrdp (SUSE-SU-2023:4873-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4873-1 advisory. - CVE-2023-42822: Fixed unchecked access to font glyph info bsc1215803. - CVE-2023-40184: Fixed restriction bypass via improper...

6.5CVSS6.5AI score0.00728EPSS
SaveExploits0References8
OSV
OSV
added 2023/12/14 6:52 p.m.5 views

SUSE-SU-2023:4873-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2023-42822: Fixed unchecked access to font glyph info bsc1215803. - CVE-2023-40184: Fixed restriction bypass via improper session handling bsc1214805...

6.5CVSS6.4AI score0.00728EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2023/12/04 12:0 a.m.17 views

Mageia: Security Advisory (MGASA-2023-0334)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.9AI score0.0063EPSS
SaveExploits0References4
OSV
OSV
added 2023/12/01 11:54 a.m.7 views

MGASA-2023-0334 Updated xrdp packages fix security vulnerability

The updated packages fix a security vulnerability Access to the font glyphs in xrdppainter.c is not bounds-checked. Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within a...

6.5CVSS6.2AI score0.0063EPSS
SaveExploits0References3
Mageia
Mageia
added 2023/12/01 11:54 a.m.56 views

Updated xrdp packages fix security vulnerability

The updated packages fix a security vulnerability Access to the font glyphs in xrdppainter.c is not bounds-checked. Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within a...

6.5CVSS6.8AI score0.0063EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/28 12:0 a.m.14 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xrdp (SUSE-SU-2023:4577-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4577-1 advisory. - CVE-2023-42822: Fixed unchecked access to font glyph info bsc1215803. Tenable has extracted the precedi...

6.5CVSS6.3AI score0.0063EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/27 8:30 a.m.5 views

SUSE-SU-2023:4577-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2023-42822: Fixed unchecked access to font glyph info bsc1215803...

6.5CVSS6.4AI score0.0063EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2023/11/10 12:0 a.m.40 views

Ubuntu: Security Advisory (USN-6474-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.00892EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/09 12:0 a.m.57 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : xrdp vulnerabilities (USN-6474-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6474-1 advisory. It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds...

9.8CVSS7.4AI score0.00892EPSS
SaveExploits0References14
Ubuntu
Ubuntu
added 2023/11/08 1:47 p.m.106 views

USN-6474-1: xrdp vulnerabilities

It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds reads. An attacker could possibly use this issue to crash the program or extract sensitive information. CVE-2022-23479, CVE-2022-23481, CVE-2022-23483, CVE-2023-42822 It was...

9.8CVSS7.1AI score0.00892EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.19 views

Fedora 39 : xrdp (2023-5134642a68)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5134642a68 advisory. Release notes for xrdp v0.9.23 2023/08/31 General announcements - Running xrdp and xrdp-sesman on separate hosts is still supported by this release,...

6.5CVSS6AI score0.00728EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.30 views

Fedora 39 : xrdp (2023-b781647782)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b781647782 advisory. Release notes for xrdp v0.9.23.1 2023/09/27 This is a security fix release for CVE-2023-42822. This update is recommended for all xrdp users. Security fixes ...

6.5CVSS5.8AI score0.0063EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.16 views

Fedora: Security Advisory (FEDORA-2023-b781647782)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS5.8AI score0.0063EPSS
SaveExploits0References3
Fedora
Fedora
added 2023/11/03 6:51 p.m.26 views

[SECURITY] Fedora 39 Update: xrdp-0.9.23.1-1.fc39

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

6.5CVSS7.2AI score0.0063EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2023/11/03 12:0 a.m.13 views

Ubuntu: Security Advisory (USN-6469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.02404EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2023/11/02 10:20 a.m.57 views

USN-6469-1: xrdp vulnerability

Ashley Newson discovered that xrdp incorrectly handled memory when processing certain incoming connections. An attacker could possibly use this issue to cause a denial of service or arbitrary code execution...

7.8CVSS7.7AI score0.02404EPSS
SaveExploits0
OSV
OSV
added 2023/11/02 10:20 a.m.7 views

USN-6469-1 xrdp vulnerability

Ashley Newson discovered that xrdp incorrectly handled memory when processing certain incoming connections. An attacker could possibly use this issue to cause a denial of service or arbitrary code execution...

7.8CVSS7.3AI score0.02404EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/02 12:0 a.m.26 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : xrdp vulnerability (USN-6469-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6469-1 advisory. Ashley Newson discovered that xrdp incorrectly handled memory when processing certain incoming connections. An attacker could possibly use...

7.8CVSS7.7AI score0.02404EPSS
SaveExploits0References2
Redos
Redos
added 2023/10/24 12:0 a.m.65 views

ROS-20231024-02

A vulnerability in the xrdppainter.c component of the XRDP server is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to protected information information...

6.5CVSS7.1AI score0.0063EPSS
SaveExploits0
Rows per page
Query Builder