Lucene search
Veracode Vulnerability DatabaseVERACODE:38595HistoryDec 24, 2022 - 1:38 p.m.
Out Of Bound Write
2022-12-2413:38:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
xrdp
out of bound write
vulnerability
xrdp_mm_trans_process_drdynvc_channel_open()
software
EPSS
0.002
Percentile
57.6%
xrdp is vulnerable to Out of Bound Write. The vulnerability exists due to the out of bound write in the xrdp_mm_trans_process_drdynvc_channel_open() function of the library, which allows an attacker to perform unintended actions.
References
github.com/neutrinolabs/xrdp/commit/6cb54a1c26b53617e1c79a0abc96d03c4add1eb8
github.com/neutrinolabs/xrdp/security/advisories/GHSA-2f49-wwpm-78pj
github.com/neutrinolabs/xrdp/security/advisories/GHSA-2f49-wwpm-78pj
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/v3.17/community.yaml
www.debian.org/security/2023/dsa-5502
Related
cvelist
cvelist
CVE-2022-23478 Out of Bound Write in xrdp
2022-12-09 17:49:42
cve
cve
CVE-2022-23478
2022-12-09 18:15:14
debiancve
debiancve
CVE-2022-23478
2022-12-09 18:15:14
alpinelinux
alpinelinux
CVE-2022-23478
2022-12-09 18:15:14
ubuntucve
ubuntucve
CVE-2022-23478
2022-12-09 00:00:00
prion
prion
Design/Logic Flaw
2022-12-09 18:15:00
nvd
nvd
CVE-2022-23478
2022-12-09 18:15:14
osv
osv
CVE-2022-23478
2022-12-09 18:15:14
xrdp - security update
2023-03-28 00:00:00
libpainter0-0.9.20-4.1 on GA media
2024-06-15 00:00:00
debian
debian
[SECURITY] [DLA 3370-1] xrdp security update
2023-03-30 11:35:46
[SECURITY] [DSA 5502-1] xrdp security update
2023-09-18 21:42:53
openvas
openvas
Debian: Security Advisory (DLA-3370-1)
2023-03-31 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0033-1)
2023-01-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0374-1)
2023-02-13 00:00:00
nessus
nessus
Debian DLA-3370-1 : xrdp - LTS security update
2023-03-30 00:00:00
SUSE SLED15 / SLES15 Security Update : xrdp (SUSE-SU-2023:0033-1)
2023-01-06 00:00:00
SUSE SLES12 Security Update : xrdp (SUSE-SU-2023:0374-1)
2023-02-14 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: xrdp-0.9.21-1.fc36
2022-12-21 01:18:14
[SECURITY] Fedora 37 Update: xrdp-0.9.21-1.fc37
2022-12-21 01:28:50
redos
redos
ROS-20221222-01
2022-12-22 00:00:00
mageia
mageia
Updated xrdp packages fix security vulnerability
2023-01-13 20:37:09
freebsd
freebsd
xrdp -- multiple vulnerabilities
2022-12-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package xrdp version 0.9.21-alt1
2022-12-21 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2249
2023-10-21 13:15:43
ubuntu
ubuntu
xrdp vulnerabilities
2023-11-08 00:00:00