Lucene search
+L

820 matches found

Mageia
Mageia
added 2023/01/13 5:37 p.m.42 views

Updated xrdp packages fix security vulnerability

xrdp less than v0.9.21 contain a buffer over flow in xrdploginwndcreate function. CVE-2022-23468 xrdp less than v0.9.21 contain a buffer over flow in audinsendopen function. CVE-2022-23477 xrdp less than v0.9.21 contain a Out of Bound Write in xrdpmmtransprocessdrdynvcchannelopen function...

9.8CVSS2.5AI score0.00892EPSS
SaveExploits0References2
OSV
OSV
added 2023/01/13 5:37 p.m.8 views

MGASA-2023-0002 Updated xrdp packages fix security vulnerability

xrdp less than v0.9.21 contain a buffer over flow in xrdploginwndcreate function. CVE-2022-23468 xrdp less than v0.9.21 contain a buffer over flow in audinsendopen function. CVE-2022-23477 xrdp less than v0.9.21 contain a Out of Bound Write in xrdpmmtransprocessdrdynvcchannelopen function...

9.8CVSS9.6AI score0.00892EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/01/06 12:0 a.m.42 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xrdp (SUSE-SU-2023:0033-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0033-1 advisory. - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23478:...

9.8CVSS7.3AI score0.00892EPSS
SaveExploits0References28
OSV
OSV
added 2023/01/05 2:9 p.m.10 views

SUSE-SU-2023:0033-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23478: Fixed an out of bound write in xrdpmmtransprocessdrdynvcchan bsc1206302. - CVE-2022-23479: Fixed a buffer overflow in xrdpmmchandatain bsc1206303. -...

9.8CVSS9.7AI score0.00892EPSS
SaveExploits0References19
OpenVAS
OpenVAS
added 2023/01/03 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2023:0012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.4AI score0.00847EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2023/01/03 12:0 a.m.23 views

SUSE SLES15 Security Update : xrdp (SUSE-SU-2023:0012-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0012-1 advisory. - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23479: Fixed a buffer overflow in...

9.8CVSS7.3AI score0.00847EPSS
SaveExploits0References22
OSV
OSV
added 2023/01/02 10:46 a.m.5 views

SUSE-SU-2023:0012-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23479: Fixed a buffer overflow in xrdpmmchandatain bsc1206303. - CVE-2022-23480: Fixed a buffer overflow in devredirprocclientdevlistannouncereq bsc1206306. -...

9.8CVSS9.7AI score0.00847EPSS
SaveExploits0References15
Veracode
Veracode
added 2022/12/24 2:4 p.m.20 views

Buffer Overflow

xrdp is vulnerable to Buffer Overflows. The vulnerability exists due to a buffer overflow in the audinsendopen function of the library, allowing an attacker to cause an application crash...

9.8CVSS9.1AI score0.00847EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
added 2022/12/24 1:56 p.m.25 views

Denial Of Service (DoS)

xrdp is vulnerable to denial of service. The vulnerability exists due to the buffer over flow in the xrdploginwndcreate function of the library, allowing an attacker to cause an application crash...

9.8CVSS8.7AI score0.00762EPSS
SaveExploits0References5Affected Software2
Veracode
Veracode
added 2022/12/24 1:56 p.m.28 views

Out Of Bound Read

xrdp is vulnerable to Out of Bound Reads. The vulnerability exists due to the out of bound read in the xrdpsecprocessmcsdataCSCORE function of the library, allowing an attacker to cause an application crash or retrieve sensitive information...

9.1CVSS8.7AI score0.00729EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
added 2022/12/24 1:56 p.m.40 views

Out Of Bound Read

xrdp is vulnerable to Out of Bound Reads. The vulnerability exists due to the out of bound read in the xrdpcapsprocessconfirmactive function of the library, allowing an attacker to cause an application crash or access sensitive information...

9.1CVSS8.7AI score0.00729EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
added 2022/12/24 1:55 p.m.23 views

Integer Overflow

xrdp is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the xrdpmmprocessrailupdatewindowtext function of the library, allowing an attacker to cause an application crash...

9.8CVSS9.2AI score0.00724EPSS
SaveExploits0References5Affected Software2
Veracode
Veracode
added 2022/12/24 1:55 p.m.25 views

Out Of Bound Reads

xrdp is vulnerable to denial of service. The vulnerability exists due to the out of bound read in the libxrdpsendtochannel function of the library, allowing an attacker to cause an application crash...

9.1CVSS8.9AI score0.00822EPSS
SaveExploits0References5Affected Software2
Veracode
Veracode
added 2022/12/24 1:55 p.m.19 views

Buffer Overflow

xrdp is vulnerable to Buffer Overflows. The vulnerability exists due to a buffer overflow in the devredirprocclientdevlistannouncereq function of the library, which allows an attacker to cause an application crash...

9.8CVSS9.1AI score0.00847EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
added 2022/12/24 1:38 p.m.24 views

Denial Of Service (DoS)

xrdp is vulnerable to denial of service. The vulnerability exists due to the buffer over flow in the xrdpmmchandatain function of the library, allowing an attacker to cause an application crash...

9.8CVSS8.7AI score0.00847EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2022/12/24 1:38 p.m.25 views

Out Of Bound Write

xrdp is vulnerable to Out of Bound Write. The vulnerability exists due to the out of bound write in the xrdpmmtransprocessdrdynvcchannelopen function of the library, which allows an attacker to perform unintended actions...

9.8CVSS8.8AI score0.00799EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
added 2022/12/24 1:27 p.m.19 views

Out Of Bound Reads

xrdp is vulnerable to Denial of Service. The vulnerability exists due to the out of bound read in the xrdpmmtransprocessdrdynvcchannelclose function of the library, allowing an attacker to cause an application crash...

9.1CVSS8.7AI score0.00892EPSS
SaveExploits0References6Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/12/23 12:0 a.m.34 views

Fedora 36 : xrdp (2022-08d2138578)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-08d2138578 advisory. Release notes for xrdp v0.9.21 2022/12/10 General announcements - Running xrdp and xrdp-sesman on separate hosts is still supported by this release,...

9.8CVSS7.6AI score0.00892EPSS
SaveExploits0References11
Redos
Redos
added 2022/12/22 12:0 a.m.48 views

ROS-20221222-01

A vulnerability in the audinsendopen function of the xrdp server is related to the possibility of a stacked buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to a remote machine Vulnerability in devredirprocclientdevlistannouncereq function ...

9.8CVSS9.5AI score0.00892EPSS
SaveExploits0
Fedora
Fedora
added 2022/12/21 1:28 a.m.30 views

[SECURITY] Fedora 37 Update: xrdp-0.9.21-1.fc37

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

9.8CVSS2AI score0.00892EPSS
SaveExploits0
Rows per page
Query Builder