Buffer overflow in xrdp - CVE-2022-23477
Published: December 12, 2022
Vulnerability identifier: #VU70107
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-23477
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in audin_send_open() function. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
xrdp
Debian Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Fedora
SUSE Enterprise Storage
Ubuntu
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
xrdp (Ubuntu package)
libpainter0
libpainter0-debuginfo
librfxencode0
librfxencode0-debuginfo
xrdp
xrdp-debuginfo
xrdp-debugsource
xrdp-devel
xrdp (Debian package)
Debian Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Fedora
SUSE Enterprise Storage
Ubuntu
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
xrdp (Ubuntu package)
libpainter0
libpainter0-debuginfo
librfxencode0
librfxencode0-debuginfo
xrdp
xrdp-debuginfo
xrdp-debugsource
xrdp-devel
xrdp (Debian package)
How to mitigate CVE-2022-23477
Install updates from vendor's website.
xrdp - update to 0.9.21
xrdp (Ubuntu package) - update to Ubuntu Pro
libpainter0 - update to 0.9.13.1-150200.4.18.1
libpainter0-debuginfo - update to 0.9.13.1-150200.4.18.1
librfxencode0 - update to 0.9.13.1-150200.4.18.1
librfxencode0-debuginfo - update to 0.9.13.1-150200.4.18.1
xrdp - update to 0.9.13.1-150200.4.18.1
xrdp-debuginfo - update to 0.9.13.1-150200.4.18.1
xrdp-debugsource - update to 0.9.13.1-150200.4.18.1
xrdp-devel - update to 0.9.13.1-150200.4.18.1
xrdp - addressed in versions 0.9.21-1.el7, 0.9.21-1.el8, 0.9.21-1.el9, 0.9.21-1.fc35, 0.9.21-1.fc36, 0.9.21-1.fc37
xrdp (Debian package) - update to 0.9.21.1-1~deb11u1
xrdp (Ubuntu package) - update to Ubuntu Pro
libpainter0 - update to 0.9.13.1-150200.4.18.1
libpainter0-debuginfo - update to 0.9.13.1-150200.4.18.1
librfxencode0 - update to 0.9.13.1-150200.4.18.1
librfxencode0-debuginfo - update to 0.9.13.1-150200.4.18.1
xrdp - update to 0.9.13.1-150200.4.18.1
xrdp-debuginfo - update to 0.9.13.1-150200.4.18.1
xrdp-debugsource - update to 0.9.13.1-150200.4.18.1
xrdp-devel - update to 0.9.13.1-150200.4.18.1
xrdp - addressed in versions 0.9.21-1.el7, 0.9.21-1.el8, 0.9.21-1.el9, 0.9.21-1.fc35, 0.9.21-1.fc36, 0.9.21-1.fc37
xrdp (Debian package) - update to 0.9.21.1-1~deb11u1