Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-23478

Out of Bound Write in xrdp

Description

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarounds for this issue. Users are advised to upgrade.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

neutrinolabs xrdp

  • < 0.9.21affected

References