CVE-2022-23478
Out of Bound Write in xrdp
Summary
Out of Bound Write in xrdp
Original description
The description as published by the source.
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarounds for this issue. Users are advised to upgrade.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-23478 xrdp Fixed in: 0.9.21.1-1~deb11u1
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org