CVE-2022-23613: Privilege escalation on xrdp
xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/xrdpto a version that resolves this vulnerability.Fixed in 0.9.21.1-1+deb12u2Fixed in 0.9.21.1-1+deb12u3Fixed in 0.10.1-3.1+deb13u2Fixed in 0.10.6.1-3 - Upgrade
Upgrade
alpine/xrdpto a version that resolves this vulnerability.Fixed in 0.9.18.1-r0 - Upgrade
Upgrade
debian/xrdpto a version that resolves this vulnerability.Fixed in 0.9.17-2.1 - Upgrade
Upgrade
ubuntu/xrdpto a version that resolves this vulnerability.Fixed in 0.6.0-1ubuntu0.1+esm3 - Upgrade
Upgrade
ubuntu/xrdpto a version that resolves this vulnerability.Fixed in 0.6.1-2ubuntu0.3+esm3 - Upgrade
Upgrade
ubuntu/xrdpto a version that resolves this vulnerability.Fixed in 0.9.5-2ubuntu0.1~esm2 - Upgrade
Upgrade
ubuntu/xrdpto a version that resolves this vulnerability.Fixed in 0.9.12-1ubuntu0.1+esm1 - Upgrade
Upgrade
ubuntu/xrdpto a version that resolves this vulnerability.Fixed in 0.9.17-2ubuntu2+esm1 - Upgrade
Upgrade
xrdpto a version that resolves this vulnerability.Fixed in 0.9.18.1
Event History
Frequently Asked Questions
What is CVE-2022-23613?
CVE-2022-23613 is a vulnerability in the xrdp remote desktop protocol (RDP) server that allows an unauthenticated attacker with local access to execute code as root.
How severe is CVE-2022-23613?
CVE-2022-23613 has a severity score of 7.8 (high).
Which versions of xrdp are affected by CVE-2022-23613?
Versions 0.9.17 and 0.9.18 of the Neutrinolabs Xrdp server are affected by CVE-2022-23613.
How can an attacker exploit CVE-2022-23613?
An attacker with local access to the sesman server can exploit CVE-2022-23613 through an integer underflow leading to a heap overflow, allowing them to execute code as root.
Has CVE-2022-23613 been patched?
Yes, CVE-2022-23613 has been patched in version 0.9.18 of the Neutrinolabs Xrdp server.