CVE-2023-40184: Improper handling of session establishment errors in xrdp
First published: Wed Aug 30 2023(Updated: )
xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.
Credit: security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Neutrinolabs Xrdp | <0.9.23 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/neutrinolabs/xrdp/blame/9bbb2ec68f390504c32f2062847aa3d821a0089a/sesman/sesexec/session.c#L571C5-L571C19
- https://github.com/neutrinolabs/xrdp/commit/a111a0fdfe2421ef600e40708b5f0168594cfb23
- https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-f489-557v-47jq
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SOT237TIHTHPX5YNIWLVNINOEYC7WMG2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5IXMQODV3OIJ7DRQBUQV7PUKNT7SH36/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URO3FKTFBPNKFARAQBEJLI4MH6YS35P5/
Frequently Asked Questions
What is CVE-2023-40184?
CVE-2023-40184 is a vulnerability in the xrdp remote desktop protocol (RDP) server that allows bypassing OS-level session restrictions.
How does CVE-2023-40184 affect xrdp?
CVE-2023-40184 affects xrdp versions prior to 0.9.23 and results in improper handling of session establishment errors.
What is the severity of CVE-2023-40184?
CVE-2023-40184 has a severity rating of medium with a CVSS score of 6.5.
How can CVE-2023-40184 be exploited?
CVE-2023-40184 can be exploited by returning a non-zero value on session establishment errors, such as PAM error, to bypass OS-level session restrictions.
How can I fix CVE-2023-40184?
To fix CVE-2023-40184, upgrade xrdp to version 0.9.23 or later.
- collector/nvd-api
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/title
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/neutrinolabs
- canonical/neutrinolabs xrdp