PT-2023-6794 · Xrdp+7 · Xrdp+7

Gafusss · Published 2023-08-19 · Updated 2025-09-03 · CVE-2023-40184

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.23

Description The issue is related to the improper handling of session establishment errors in xrdp, allowing bypassing of OS-level session restrictions. The auth start session function can return a non-zero value on errors, such as PAM errors, which may result in session restrictions being bypassed. This affects users who use restrictions by PAM, while administrators who do not use these restrictions are not affected.

Recommendations To resolve the issue, upgrade to release version 0.9.23 or later. As a temporary workaround, consider restricting access to the auth start session function until a patch is available. Additionally, review and adjust PAM settings, such as those in ./etc/security/limits.conf, to minimize the risk of exploitation. There are no known workarounds for this issue other than upgrading to the fixed version.

Exploit

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

ALT-PU-2023-5794

ALT-PU-2023-5795

ALT-PU-2023-5796

ALT-PU-2023-5797

ALT-PU-2023-5872

BDU:2023-07659

CVE-2023-40184

DLA-4166-1

GHSA-F489-557V-47JQ

MGASA-2023-0276

OPENSUSE-SU-2023_3830-1

OPENSUSE-SU-2024:13399-1

ROSA-SA-2024-2445

ROSA-SA-2024-2523

SUSE-SU-2023:3735-1

SUSE-SU-2023:3830-1

SUSE-SU-2023:4873-1

SUSE-SU-2023_3735-1

SUSE-SU-2023_3830-1

SUSE-SU-2023_4873-1

USN-6474-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Red Os

Suse

Ubuntu

Xrdp

References · 60

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40184.json · Exploit
• https://github.com/neutrinolabs/xrdp/commit/a111a0fdfe2421ef600e40708b5f0168594cfb23 · Patch
• https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-f489-557v-47jq · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07659 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-40184 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/U5IXMQODV3OIJ7DRQBUQV7PUKNT7SH36 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23482 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23493 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6474-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4166-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6474-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-40184 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-40184 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23481 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40184 · Vendor Advisory