Integer Overflow

libxrdp.so,is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the expandIfZip parameter...

Improper Handling Of Exceptional Conditions

libxrdp.so is vulnerable to Improper Handling Of Exceptional Conditions. The vulnerability is caused by not handling session establishment exceptions appropriately in the authstartsession function in the sesman/libsesman/verifyuserpam.c file. An attacker can bypass OS-level session restrictions b...

SUSE CVE-2022-23483

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

libxrdp_send_to_channel() XRDP Unauthorized Access

The vulnerability of the libxrdpsendtochannel function on the XRDP server is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2022-23483 Out-of-Bound Read in libxrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23483 Out-of-Bound Read in libxrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

PT-2022-5892

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to an Out of Bound Read in the libxrdp send to channel function. This can allow a remote attacker to gain unauthorized access to protected information. There are no known workaroun...