Skip to content
OpenAdvisories
Critical USN-6474-1 13 CVEs

xrdp vulnerabilities

Published Nov 8, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds reads. An attacker
could possibly use this issue to crash the program or extract sensitive
information. (CVE-2022-23479, CVE-2022-23481, CVE-2022-23483,
CVE-2023-42822)

It was discovered that xrdp improperly handled session establishment
errors. An attacker could potentially use this issue to bypass the
OS-level session restrictions by PAM. (CVE-2023-40184)

It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds writes. An attacker
could possibly use this issue to cause memory corruption or execute
arbitrary code. This issue only affected Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-23468)

It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds reads. An attacker
could possibly use this issue to crash the program or extract sensitive
information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS
and Ubuntu 22.04 LTS. (CVE-2022-23480, CVE-2022-23482, CVE-2022-23484)

It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds reads. An attacker
could possibly use this issue to crash the program or extract sensitive
information. This issue only affected Ubuntu 20.04 LTS and
Ubuntu 22.04 LTS. (CVE-2022-23477, CVE-2022-23493)

It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds writes. An attacker
could possibly use this issue to cause memory corruption or execute
arbitrary code. This issue only affected Ubuntu 20.04 LTS and
Ubuntu 22.04 LTS. (CVE-2022-23478)

It was discovered that xrdp incorrectly handled validation of
client-supplied data, which could lead to out-of-bounds reads. An attacker
could possibly use this issue to crash the program or extract sensitive
information. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-23613)

Fixed packages 5

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS xrdp 0.6.0-1ubuntu0.1+esm3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS xrdp 0.6.1-2ubuntu0.3+esm3
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS xrdp 0.9.5-2ubuntu0.1~esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS xrdp 0.9.12-1ubuntu0.1+esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS xrdp 0.9.17-2ubuntu2+esm1

Vulnerabilities 13

  • Critical 9.1
    CVE-2022-23477

    Buffer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in audin_send_open() function. There are no known workarounds for this issue. Users are…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-23478

    Out of Bound Write in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarou…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-23479

    Buffer Overflow occurs in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. User…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-23480

    Buffer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in devredir_proc_client_devlist_announce_req() function. There are no known workarounds…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-23493

    Out of Bound Read in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close() function. There are no known workarou…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • High 8.2
    CVE-2022-23484

    Integer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text() function. There are no known workarounds f…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • High 7.8
    CVE-2022-23613

    Privilege escalation on xrdp

    xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root.…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-23483

    Out-of-Bound Read in libxrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in libxrdp_send_to_channel() function. There are no known workarounds for this issue. …

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-23468

    Buffer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_login_wnd_create() function. There are no known workarounds for this issue. Use…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Medium 4.6
    CVE-2023-42822

    Unchecked access to font glyph info in xrdp

    xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdp_painter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerabil…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • Low 2.6
    CVE-2023-40184

    Improper handling of session establishment errors in xrdp

    xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g.…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • None 0.0
    CVE-2022-23481

    Out-of-Bound Read in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_caps_process_confirm_active() function. There are no known workarounds for thi…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • None 0.0
    CVE-2022-23482

    Out-of-Bound Read in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_sec_process_mcs_data_CS_CORE() function. There are no known workarounds for th…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-23468
  • report
    https://ubuntu.com/security/CVE-2022-23477
  • report
    https://ubuntu.com/security/CVE-2022-23478
  • report
    https://ubuntu.com/security/CVE-2022-23479
  • report
    https://ubuntu.com/security/CVE-2022-23480
  • report
    https://ubuntu.com/security/CVE-2022-23481
  • report
    https://ubuntu.com/security/CVE-2022-23482
  • report
    https://ubuntu.com/security/CVE-2022-23483
  • report
    https://ubuntu.com/security/CVE-2022-23484
  • report
    https://ubuntu.com/security/CVE-2022-23493
  • report
    https://ubuntu.com/security/CVE-2022-23613
  • report
    https://ubuntu.com/security/CVE-2023-40184
  • report
    https://ubuntu.com/security/CVE-2023-42822