Описание
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in devredir_proc_client_devlist_announce_req() function. There are no known workarounds for this issue. Users are advised to upgrade.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 0.9.21.1-1 |
| esm-apps/bionic | released | 0.9.5-2ubuntu0.1~esm2 |
| esm-apps/focal | released | 0.9.12-1ubuntu0.1+esm1 |
| esm-apps/jammy | released | 0.9.17-2ubuntu2+esm1 |
| esm-apps/noble | not-affected | 0.9.21.1-1 |
| esm-apps/xenial | not-affected | code not present |
| esm-infra-legacy/trusty | not-affected | code not present |
| focal | ignored | end of standard support, was needed |
| jammy | needed |
Показывать по
EPSS
9.1 Critical
CVSS3
Связанные уязвимости
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in devredir_proc_client_devlist_announce_req() function. There are no known workarounds for this issue. Users are advised to upgrade.
xrdp is an open source project which provides a graphical login to rem ...
Уязвимость функции devredir_proc_client_devlist_announce_req() сервера XRDP, позволяющая нарушителю выполнить произвольный код
EPSS
9.1 Critical
CVSS3