CVE-2022-23479

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-23479
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23479.json
Aliases
  • GHSA-pgx2-3fjj-fqqh
Related
Published
2022-12-09T18:15:14Z
Modified
2023-11-29T09:26:56.022917Z
Details

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdpmmchandatain() function. There are no known workarounds for this issue. Users are advised to upgrade.

References

Affected packages

Git / github.com/neutrinolabs/xrdp

Affected ranges

Type
GIT
Repo
https://github.com/neutrinolabs/xrdp
Events
Introduced
0The exact introduced commit is unknown
Fixed

Affected versions

v0.*

v0.9.1
v0.9.10
v0.9.11
v0.9.12
v0.9.13
v0.9.13.1
v0.9.14
v0.9.15
v0.9.16
v0.9.17
v0.9.18
v0.9.18.1
v0.9.19
v0.9.2
v0.9.20
v0.9.3
v0.9.3.1
v0.9.3.rc1
v0.9.4
v0.9.4.rc1
v0.9.5
v0.9.6
v0.9.7
v0.9.8
v0.9.9