SUSE-SU-2023:0374-1
- Source
- https://www.suse.com/support/update/announcement/2023/suse-su-20230374-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0374-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2023:0374-1
- Upstream
- Related
- Published
- 2023-02-10T15:32:11Z
- Modified
- 2026-03-11T07:22:16Z
- Summary
- Security update for xrdp
- Details
-
This update for xrdp fixes the following issues:
- CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300).
- CVE-2022-23478: Fixed an out of bound write in xrdp_mm_trans_process_drdynvc_chan() (bsc#1206302).
- CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303).
- CVE-2022-23480: Fixed a buffer overflow in devredir_proc_client_devlist_announce_req() (bsc#1206306).
- CVE-2022-23481: Fixed an out of bound read in xrdp_caps_process_confirm_active() (bsc#1206307).
- CVE-2022-23482: Fixed an out of bound read in xrdp_sec_process_mcs_data_CS_CORE() (bsc#1206310, bsc#1206621).
- CVE-2022-23483: Fixed an out of bound read in libxrdp_send_to_channel() (bsc#1206311).
- CVE-2022-23484: Fixed a integer overflow in xrdp_mm_process_rail_update_window_text() (bsc#1206312).
- CVE-2022-23493: Fixed an out of bound read in xrdp_mm_trans_process_drdynvc_channel_close() (bsc#1206313).
- References
-
- https://www.suse.com/support/update/announcement/2023/suse-su-20230374-1/
- https://bugzilla.suse.com/1206300
- https://bugzilla.suse.com/1206302
- https://bugzilla.suse.com/1206303
- https://bugzilla.suse.com/1206306
- https://bugzilla.suse.com/1206307
- https://bugzilla.suse.com/1206310
- https://bugzilla.suse.com/1206311
- https://bugzilla.suse.com/1206312
- https://bugzilla.suse.com/1206313
- https://bugzilla.suse.com/1206621
- https://www.suse.com/security/cve/CVE-2022-23468
- https://www.suse.com/security/cve/CVE-2022-23478
- https://www.suse.com/security/cve/CVE-2022-23479
- https://www.suse.com/security/cve/CVE-2022-23480
- https://www.suse.com/security/cve/CVE-2022-23481
- https://www.suse.com/security/cve/CVE-2022-23482
- https://www.suse.com/security/cve/CVE-2022-23483
- https://www.suse.com/security/cve/CVE-2022-23484
- https://www.suse.com/security/cve/CVE-2022-23493
Affected packages
SUSE:Linux Enterprise Server 12 SP5 / xrdp
Package
- Name
- xrdp
- Purl
- pkg:rpm/suse/xrdp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5