Skip to content
CVE PROGRAM SOURCE RECORD0.0 None

CVE-2022-23482

Out-of-Bound Read in xrdp

Description

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_sec_process_mcs_data_CS_CORE() function. There are no known workarounds for this issue. Users are advised to upgrade.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

neutrinolabs xrdp

  • < 0.9.21affected

References