CVE-2023-42822: Unchecked access to font glyph info in xrdp
First published: Wed Sep 27 2023(Updated: )
xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdp_painter.c is not bounds-checked . Since some of this data is controllable by the user, this can result in an out-of-bounds read within the xrdp executable. The vulnerability allows an out-of-bounds read within a potentially privileged process. On non-Debian platforms, xrdp tends to run as root. Potentially an out-of-bounds write can follow the out-of-bounds read. There is no denial-of-service impact, providing xrdp is running in forking mode. This issue has been addressed in release 0.9.23.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Credit: security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Neutrinolabs Xrdp | <0.9.23.1 | |
| Fedoraproject Fedora | =37 | |
| Fedoraproject Fedora | =38 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/neutrinolabs/xrdp/commit/73acbe1f7957c65122b00de4d6f57a8d0d257c40
- https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-2hjx-rm4f-r9hw
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFGL22QQF65OIZRMCKUZCVJQCKGUBRYE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTXODUR4ILM7ZPA6ZGY6VSK4BBSBMKGY/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FPGA4M7IYCP7OILDF2ZJEVSXUOFEFQ6/
Frequently Asked Questions
What is CVE-2023-42822?
CVE-2023-42822 is a vulnerability in the xrdp remote desktop protocol server that allows an out-of-bounds read within the xrdp executable.
What is the severity of CVE-2023-42822?
The severity of CVE-2023-42822 is medium, with a severity value of 6.5.
How does CVE-2023-42822 affect xrdp?
CVE-2023-42822 affects xrdp versions up to and excluding 0.9.23.1, specifically in the xrdp_painter.c file where access to font glyphs is not bounds-checked, leading to an out-of-bounds read within the xrdp executable.
How can I fix CVE-2023-42822?
To fix CVE-2023-42822, it is recommended to update xrdp to version 0.9.23.1 or newer, which includes a patch for this vulnerability.
Where can I find more information about CVE-2023-42822?
More information about CVE-2023-42822 can be found in the GitHub commit and security advisory, as well as the Fedora Project announcement linked in the references.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/title
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/neutrinolabs
- canonical/neutrinolabs xrdp
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/37
- version/fedoraproject fedora/38