PT-2022-4799 · Xrdp+4 · Xrdp+4

Bojan Smojver · Published 2022-02-07 · Updated 2024-06-15 · CVE-2022-23613

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.18.1

Description The issue is related to an integer underflow leading to a heap overflow in the sesman server, allowing any unauthenticated attacker with local access to the sesman server to execute code as root. This enables the attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 0.9.18.1, upgrade to version 0.9.18.1 or above to resolve the issue. As a temporary workaround, consider restricting access to the sesman server to minimize the risk of exploitation.

Exploit

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

ALT-PU-2022-1226

ALT-PU-2022-1259

ALT-PU-2022-3404

ALT-PU-2023-5781

BDU:2022-05759

CVE-2022-23613

GHSA-8H98-H426-XF32

OPENSUSE-SU-2024:12112-1

USN-6474-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Ubuntu

Xrdp

References · 36

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23613.json · Exploit
• https://github.com/neutrinolabs/xrdp/commit/4def30ab8ea445cdc06832a44c3ec40a506a0ffa · Patch
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-23613 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23480 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-23613 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12112-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40184 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6474-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23613 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-23613 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6474-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23468 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23483 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3XGFJNQMNXHBD3J7CBM4YURYEDXROWZ · Vendor Advisory