Lucene search
K

5 matches found

Veracode
Veracode
added 2023/10/09 12:49 p.m.19 views

Integer Overflow

libxrdp.so,is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the expandIfZip parameter...

7.8CVSS7.2AI score0.00099EPSS
Exploits0References6
Veracode
Veracode
added 2023/09/07 12:29 p.m.24 views

Improper Handling Of Exceptional Conditions

libxrdp.so is vulnerable to Improper Handling Of Exceptional Conditions. The vulnerability is caused by not handling session establishment exceptions appropriately in the authstartsession function in the sesman/libsesman/verifyuserpam.c file. An attacker can bypass OS-level session restrictions b...

6.5CVSS6.8AI score0.00058EPSS
Exploits0References6Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:28 a.m.1 views

SUSE CVE-2022-23483

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

5.3CVSS6.7AI score0.00376EPSS
Exploits0References8
Cvelist
Cvelist
added 2022/12/09 5:50 p.m.16 views

CVE-2022-23483 Out-of-Bound Read in libxrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

7.5CVSS9.5AI score0.00376EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/12/09 5:50 p.m.4 views

CVE-2022-23483 Out-of-Bound Read in libxrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in libxrdpsendtochannel function. There are no known workarounds for this issue. Users are advised to upgrade...

7.5CVSS9.1AI score0.00376EPSS
Exploits0References2
Rows per page
Query Builder