CVE-2022-23484: Integer Overflow in xrdp
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdpmmprocessrailupdatewindowtext() function. There are no known workarounds for this issue. Users are advised to upgrade.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-23484?
CVE-2022-23484 is a vulnerability in xrdp that allows for an Integer Overflow in the xrdp_mm_process_rail_update_window_text() function.
How does CVE-2022-23484 affect xrdp?
CVE-2022-23484 affects xrdp versions prior to 0.9.21.
What is the severity of CVE-2022-23484?
CVE-2022-23484 has a severity rating of 9.8 (Critical).
Is there a workaround for CVE-2022-23484?
There are no known workarounds for CVE-2022-23484; users are advised to upgrade to xrdp version 0.9.21 or later.
Where can I find more information about CVE-2022-23484?
You can find more information about CVE-2022-23484 on the following references: [GitHub Advisory](https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-rqfx-5fv8-q9c6), [Debian Security Advisory](https://www.debian.org/security/2023/dsa-5502), [GitHub Commit](https://github.com/neutrinolabs/xrdp/commit/c2c6efb1d377be6baaa4acbc9d3700490fe92887).