CVE-2022-23478: falha crítica em neutrinolabs xrdp
Out of Bound Write in xrdp
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 0.9%
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarounds for this issue. Users are advised to upgrade.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Produtos afetados
neutrinolabs · xrdpCVEs relacionadas — neutrinolabs xrdp
No mesmo produto, das mais perigosas para as menos.
CVE-2020-4044HIGHLocal users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate itEPSS 2.3%CVE-2025-68670CRITICALxrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer OverflowEPSS 1.4%CVE-2026-41252CRITICALxrdp: lib_palette_update Heap Buffer Overflow & RCEEPSS 1.1%CVE-2022-23493CRITICALOut of Bound Read in xrdpEPSS 1.0%CVE-2022-23477CRITICALBuffer Overflow in xrdpEPSS 0.9%CVE-2022-23480CRITICALBuffer Overflow in xrdpEPSS 0.9%