PT-2022-5890

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to a buffer overflow in the devredir proc client devlist announce req function. This can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associate...

PT-2022-5892

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to an Out of Bound Read in the libxrdp send to channel function. This can allow a remote attacker to gain unauthorized access to protected information. There are no known workaroun...

PT-2022-5893

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to a buffer overflow in the xrdp mm chan data in function, which can be exploited by a remote attacker to execute arbitrary code. This is due to the lack of size checking for input...

PT-2022-5894

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to an Out of Bound Read in the xrdp mm trans process drdynvc channel close function. This can allow a remote attacker to gain unauthorized access to protected information or cause ...

PT-2022-5896

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to a buffer overflow in the xrdp login wnd create function of the xrdp server, which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. This...

CVE-2022-23493: Out-of-bounds Read

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpmmtransprocessdrdynvcchannelclose function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23482: Out-of-bounds Read

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpsecprocessmcsdataCSCORE function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23468: Buffer Copy without Checking Size of Input

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in xrdploginwndcreate function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23484: Integer Overflow or Wraparound

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Integer Overflow in xrdpmmprocessrailupdatewindowtext function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23483: Out-of-bounds Read

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23481: Out-of-bounds Read

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpcapsprocessconfirmactive function. There are no known workarounds for this issue. Users are advised to upgrade...

PT-2022-5897

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to an Out of Bound Read in the xrdp caps process confirm active function. This can allow a remote attacker to gain unauthorized access to protected information or cause a denial of...

CVE-2022-23477: Buffer Copy without Checking Size of Input

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in audinsendopen function. There are no known workarounds for this issue. Users are advised to upgrade...

PT-2022-5891

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to an integer overflow in the xrdp mm process rail update window text function of the xrdp server. This can allow a remote attacker to execute arbitrary code. xrdp is an open sourc...

CVE-2022-23479: Buffer Copy without Checking Size of Input

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in xrdpmmchandatain function. There are no known workarounds for this issue. Users are advised to upgrade...

PT-2022-5818

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to a buffer overflow in the audin send open function of the xrdp server, which can be exploited by a remote attacker to gain access to a remote machine. xrdp is an open source...

PT-2022-5895

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to an Out of Bound Read in the xrdp sec process mcs data CS CORE function. This can allow a remote attacker to gain unauthorized access to protected information or cause a denial o...

xrdp input validation vulnerability

xrdp is an open source remote desktop protocol server from Neutrinolabs Labs. An input validation error vulnerability exists in versions prior to xrdp v0.9.21, which stems from the inclusion of an integer overflow in the xrdpmmprocessrailupdatewindowtext function...

xrdp buffer error vulnerability

xrdp is an open source remote desktop protocol server from Neutrinolabs Labs. A buffer error vulnerability exists in versions prior to xrdp v0.9.21, which stems from the inclusion of out-of-bounds writes in the xrdpmmtransprocessdrdynvcchannelopen function...

xrdp security vulnerabilities

xrdp is an open source remote desktop protocol server from Neutrinolabs Labs. A security vulnerability exists in xrdp versions prior to v0.9.21, which stems from the inclusion of a buffer overflow in the audinsendopen function...