Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-23479

Опубликовано: 09 дек. 2022
Источник: debian

Описание

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. Users are advised to upgrade.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
xrdpfixed0.9.21.1-1package

Примечания

  • https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-pgx2-3fjj-fqqh

  • https://github.com/neutrinolabs/xrdp/commit/60864014b733c10881c078048560858067fe5d0f

Связанные уязвимости

CVSS3: 9.1
ubuntu
больше 2 лет назад

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. Users are advised to upgrade.

CVSS3: 9.1
nvd
больше 2 лет назад

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. Users are advised to upgrade.

CVSS3: 9.8
fstec
больше 2 лет назад

Уязвимость функции xrdp_mm_chan_data_in() сервера XRDP, позволяющая нарушителю выполнить произвольный код

suse-cvrf
больше 2 лет назад

Security update for xrdp

suse-cvrf
больше 2 лет назад

Security update for xrdp