CVE-2022-23482

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpsecprocessmcsdataCSCORE function. There are no known workarounds for this issue. Users are advised to upgrade...

CVE-2022-23479

CVE-2022-23479 affects xrdp prior to version 0.9.21. A buffer overflow in the function xrdp_mm_chan_data_in() is reported. The available connected sources consistently describe the issue as a pre-0.9.21 vulnerability with no known workarounds and advise upgrading to a fixed release. Debian securi...