CVE-2022-23468: Buffer Overflow in xrdp
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdploginwndcreate() function. There are no known workarounds for this issue. Users are advised to upgrade.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-23468?
CVE-2022-23468 is a vulnerability in xrdp, an open source project that provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
What is the severity of CVE-2022-23468?
CVE-2022-23468 has a severity level of critical, with a CVSS score of 9.8.
How does CVE-2022-23468 affect xrdp?
CVE-2022-23468 affects xrdp versions prior to 0.9.21, leading to a buffer overflow in the xrdp_login_wnd_create() function.
Are there any known workarounds for CVE-2022-23468?
No, there are no known workarounds for CVE-2022-23468.
How can I fix CVE-2022-23468?
To fix CVE-2022-23468, users are advised to upgrade to xrdp version 0.9.21 or later.