Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE Linux Enterprise: 2023:0012-1 Important Update on xrdp Issues

suse
Calendar Grey January 2, 2023
Dist Suse Esm H88
Important Fedora Security Update for vncviewer addresses several vulnerabilities, greatly improving overall protection.
An update that fixes 7 vulnerabilities is now available

Summary

This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300). - CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303). - CVE-2022-23480: Fixed a buffer overflow in devredir_proc_client_devlist_announce_req() (bsc#1206306). - CVE-2022-23481: Fixed an out of bound read in xrdp_caps_process_confirm_active() (bsc#1206307). - CVE-2022-23482: Fixed an out of bound read in xrdp_sec_process_mcs_data_CS_CORE() (bsc#1206310). - CVE-2022-23483: Fixed an out of bound read in libxrdp_send_to_channel() (bsc#1206311). - CVE-2022-23484: Fixed a integer overflow in xrdp_mm_process_rail_update_window_text() (bsc#1206312). Patch Instructions:

Topics%20covered

Topics Covered

security advisory buffer overflow important out of bounds SUSE Linux Enterprise xrdp SUSE update

References

#1206300 #1206303 #1206306 #1206307 #1206310

#1206311 #1206312

Cross- CVE-2022-23468 CVE-2022-23479 CVE-2022-23480

CVE-2022-23481 CVE-2022-23482 CVE-2022-23483

CVE-2022-23484

CVSS scores:

CVE-2022-23468 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-23468 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CVE-2022-23479 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-23479 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVE-2022-23480 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-23480 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVE-2022-23481 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:0012-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow important out of bounds SUSE Linux Enterprise xrdp SUSE update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here