CVE-2022-23493
Out of Bound Read in xrdp
Summary
Out of Bound Read in xrdp
Original description
The description as published by the source.
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
xrdp < v0.9.21 contain a Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close() function. There are no known workarounds for this issue. Users are advised to upgrade.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-23493 xrdp Fixed in: 0.9.21.1-1~deb11u1
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org