Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-23484

Опубликовано: 09 дек. 2022
Источник: ubuntu
Приоритет: medium
CVSS3: 8.2

Описание

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text() function. There are no known workarounds for this issue. Users are advised to upgrade.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

0.9.21.1-1
esm-apps/bionic

released

0.9.5-2ubuntu0.1~esm2
esm-apps/focal

released

0.9.12-1ubuntu0.1+esm1
esm-apps/jammy

released

0.9.17-2ubuntu2+esm1
esm-apps/noble

not-affected

0.9.21.1-1
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
focal

ignored

end of standard support, was needed
jammy

needed

Показывать по

8.2 High

CVSS3

Связанные уязвимости

CVSS3: 8.2
nvd
больше 2 лет назад

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text() function. There are no known workarounds for this issue. Users are advised to upgrade.

CVSS3: 8.2
debian
больше 2 лет назад

xrdp is an open source project which provides a graphical login to rem ...

CVSS3: 9.8
fstec
больше 2 лет назад

Уязвимость функции xrdp_mm_process_rail_update_window_text() сервера XRDP, позволяющая нарушителю выполнить произвольный код

suse-cvrf
больше 2 лет назад

Security update for xrdp

suse-cvrf
больше 2 лет назад

Security update for xrdp

8.2 High

CVSS3