CVE-2022-23480: Buffer Overflow in xrdp
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in devredirprocclientdevlistannouncereq() function. There are no known workarounds for this issue. Users are advised to upgrade.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-23480?
CVE-2022-23480 is a vulnerability in xrdp, an open-source project that provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
What is the severity of CVE-2022-23480?
The severity of CVE-2022-23480 is critical, with a severity score of 9.8.
How does CVE-2022-23480 affect xrdp?
CVE-2022-23480 affects xrdp versions prior to 0.9.21, as it contains a buffer overflow vulnerability in the devredir_proc_client_devlist_announce_req() function.
Are there any known workarounds for CVE-2022-23480?
No, there are no known workarounds for CVE-2022-23480. Users are advised to upgrade to a patched version of xrdp.
How can I fix CVE-2022-23480?
To fix CVE-2022-23480, users are advised to upgrade their xrdp installations to version 0.9.21 or later.