SUSE SLES15 Security Update : xrdp (SUSE-SU-2023:0012-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0012-1 advisory. - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23479: Fixed a buffer overflow in...

SUSE: Security Advisory (SUSE-SU-2023:0012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:0012-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23479: Fixed a buffer overflow in xrdpmmchandatain bsc1206303. - CVE-2022-23480: Fixed a buffer overflow in devredirprocclientdevlistannouncereq bsc1206306. -...

Buffer Overflow

xrdp is vulnerable to Buffer Overflows. The vulnerability exists due to a buffer overflow in the audinsendopen function of the library, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

xrdp is vulnerable to denial of service. The vulnerability exists due to the buffer over flow in the xrdploginwndcreate function of the library, allowing an attacker to cause an application crash...

Out Of Bound Read

xrdp is vulnerable to Out of Bound Reads. The vulnerability exists due to the out of bound read in the xrdpsecprocessmcsdataCSCORE function of the library, allowing an attacker to cause an application crash or retrieve sensitive information...

Out Of Bound Read

xrdp is vulnerable to Out of Bound Reads. The vulnerability exists due to the out of bound read in the xrdpcapsprocessconfirmactive function of the library, allowing an attacker to cause an application crash or access sensitive information...

Integer Overflow

xrdp is vulnerable to denial of service. The vulnerability exists due to the integer overflow in the xrdpmmprocessrailupdatewindowtext function of the library, allowing an attacker to cause an application crash...

Out Of Bound Reads

xrdp is vulnerable to denial of service. The vulnerability exists due to the out of bound read in the libxrdpsendtochannel function of the library, allowing an attacker to cause an application crash...

Buffer Overflow

xrdp is vulnerable to Buffer Overflows. The vulnerability exists due to a buffer overflow in the devredirprocclientdevlistannouncereq function of the library, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

xrdp is vulnerable to denial of service. The vulnerability exists due to the buffer over flow in the xrdpmmchandatain function of the library, allowing an attacker to cause an application crash...

Out Of Bound Write

xrdp is vulnerable to Out of Bound Write. The vulnerability exists due to the out of bound write in the xrdpmmtransprocessdrdynvcchannelopen function of the library, which allows an attacker to perform unintended actions...

Out Of Bound Reads

xrdp is vulnerable to Denial of Service. The vulnerability exists due to the out of bound read in the xrdpmmtransprocessdrdynvcchannelclose function of the library, allowing an attacker to cause an application crash...

Fedora 36 : xrdp (2022-08d2138578)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-08d2138578 advisory. Release notes for xrdp v0.9.21 2022/12/10 General announcements - Running xrdp and xrdp-sesman on separate hosts is still supported by this release,...

ROS-20221222-01

A vulnerability in the audinsendopen function of the xrdp server is related to the possibility of a stacked buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to a remote machine Vulnerability in devredirprocclientdevlistannouncereq function ...

[SECURITY] Fedora 37 Update: xrdp-0.9.21-1.fc37

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

[SECURITY] Fedora 36 Update: xrdp-0.9.21-1.fc36

xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...

Security fix for the ALT Linux 10 package xrdp version 0.9.21-alt1

0.9.21-alt1 built Dec. 21, 2022 Andrey Cherepanov in task 311590 Dec. 11, 2022 Andrey Cherepanov - New version. - Security fixes: CVE-2022-23468, CVE-2022-23477, CVE-2022-23478, CVE-2022-23479, CVE-2022-23480, CVE-2022-23481, CVE-2022-23483, CVE-2022-23482, CVE-2022-23484, CVE-2022-23493...

Fedora: Security Advisory for xrdp (FEDORA-2022-08d2138578)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for xrdp (FEDORA-2022-6fe4046ae9)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...