MGASA-2023-0002

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2023-0002.html

Import Source

https://advisories.mageia.org/MGASA-2023-0002.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2023-0002

Related

Published

2023-01-13T17:37:09Z

Modified

2023-01-13T16:40:58Z

Summary

Updated xrdp packages fix security vulnerability

Details

xrdp less than v0.9.21 contain a buffer over flow in xrdploginwnd_create() function. (CVE-2022-23468)

xrdp less than v0.9.21 contain a buffer over flow in audinsendopen() function. (CVE-2022-23477)

xrdp less than v0.9.21 contain a Out of Bound Write in xrdpmmtransprocessdrdynvcchannelopen() function. (CVE-2022-23478)

xrdp less than v0.9.21 contain a buffer over flow in xrdpmmchandatain() function. (CVE-2022-23479)

xrdp less than v0.9.21 contain a buffer over flow in devredirprocclientdevlistannounce_req() function. (CVE-2022-23480)

xrdp less than v0.9.21 contain a Out of Bound Read in xrdpcapsprocessconfirmactive() function. (CVE-2022-23481)

xrdp less than v0.9.21 contain a Out of Bound Read in xrdpsecprocessmcsdataCSCORE() function. (CVE-2022-23482)

xrdp less than v0.9.21 contain a Out of Bound Read in libxrdpsendto_channel() function. (CVE-2022-23483)

xrdp less than v0.9.21 contain a Integer Overflow in xrdpmmprocessrailupdatewindowtext() function. (CVE-2022-23484)

xrdp less than v0.9.21 contain a Out of Bound Read in xrdpmmtransprocessdrdynvcchannelclose() function. (CVE-2022-23493)

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.9.21-1.mga8

{
    "section": "core"
}