Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-23478 EUVD-2022-28539

Out of Bound Write in xrdp

Published Dec 9, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Vendor: neutrinolabs Product: xrdp Package: xrdp Package: xrdp Package: xrdp Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu

Description

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarounds for this issue. Users are advised to upgrade.

Affected products

VendorProductAffectedFixed
neutrinolabs xrdp < 0.9.21 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 xrdp 0.9.21.1-1 —
Debian 13 xrdp 0.9.21.1-1 —
Debian 12 xrdp 0.9.21.1-1 —
Debian 11 xrdp 0.9.21.1-1~deb11u1 DSA-5502-1
Debian 10 xrdp 0.9.9-1+deb10u2 DLA-3370-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS xrdp 0.9.17-2ubuntu2+esm1 USN-6474-1
Ubuntu Pro 20.04 LTS xrdp 0.9.12-1ubuntu0.1+esm1 USN-6474-1
Ubuntu Pro 18.04 LTS xrdp 0.9.5-2ubuntu0.1~esm2 USN-6474-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS xrdp 0.6.1-2ubuntu0.3+esm3 USN-6474-1
Ubuntu Pro 14.04 LTS xrdp 0.6.0-1ubuntu0.1+esm3 USN-6474-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP4 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SLES 15 SP3 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SLES 15 SP2 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SLES 12 SP5 xrdp 0.9.10-3.8.1 SUSE-SU-2023:0374-1
Show 14 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP3 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SLES for SAP 15 SP2 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SLES for SAP 12 SP5 xrdp 0.9.10-3.8.1 SUSE-SU-2023:0374-1
SLE Real Time 15 SP3 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SLE HPC 15 SP3 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SLE HPC 15 SP2 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SUSE Manager Server 4.2 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SUSE Manager Server 4.1 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SUSE Manager Retail Branch Server 4.2 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SUSE Manager Retail Branch Server 4.1 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SUSE Manager Proxy 4.2 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SUSE Manager Proxy 4.1 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SUSE Enterprise Storage 7.1 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1
SUSE Enterprise Storage 7 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed xrdp 0.9.20-4.1 openSUSE-SU-2024:12602-1
openSUSE Leap 15.4 xrdp 0.9.13.1-150200.4.15.1 SUSE-SU-2023:0033-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 xrdp 0.9.21.1-r0 —
Alpine v3.23 xrdp 0.9.21.1-r0 —
Alpine v3.22 xrdp 0.9.21.1-r0 —
Alpine v3.21 xrdp 0.9.21.1-r0 —
Alpine v3.20 xrdp 0.9.21.1-r0 —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 xrdp 0.9.21.1-r0 —
Alpine v3.18 xrdp 0.9.21.1-r0 —
Alpine v3.17 xrdp 0.9.21.1-r0 —

Advisories 6

References