Every CVE Search/ Get API key

CVE-2022-23613

Privilege escalation on xrdp

7.8 HighFix available

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.49%Down 2.0 points since Feb 8, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.8

Privilege escalation on xrdp

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Record
CVE-2022-23613
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-191
Updated
2026-11-02
EUVDEUVD-2022-28582 7.8

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Record
EUVD-2022-28582
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
NVD 7.8

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Record
CVE-2022-23613
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-191
Updated
2026-11-02
OSVALPINE-CVE-2022-23613 7.8

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Record
ALPINE-CVE-2022-23613
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSV 7.8

Privilege escalation on xrdp

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Record
CVE-2022-23613
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-191
Updated
2026-11-02
OSVDEBIAN-CVE-2022-23613 7.8

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Record
DEBIAN-CVE-2022-23613
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVUBUNTU-CVE-2022-23613 7.8

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Record
UBUNTU-CVE-2022-23613
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:12112-1 No score

libpainter0-0.9.19-1.1 on GA media

These are all security issues fixed in the libpainter0-0.9.19-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12112-1
Updated
2026-11-02
OSVUSN-6474-1 No score

xrdp vulnerabilities

It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds reads. An attacker could possibly use this issue to crash the program or extract sensitive information. (CVE-2022-23479, CVE-2022-23481, CVE-2022-23483, CVE-2023-42822)

It was discovered that xrdp improperly handled session establishment errors. An attacker could potentially use this issue to bypass the OS-level session restrictions by PAM. (CVE-2023-40184)

It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds writes. An attacker could possibly use this issue to cause memory corruption or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-23468)

It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds reads. An attacker could possibly use this issue to crash the program or extract sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-23480, CVE-2022-23482, CVE-2022-23484)

It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds reads. An attacker could possibly use this issue to crash the program or extract sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-23477, CVE-2022-23493)

It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds writes. An attacker could possibly use this issue to cause memory corruption or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-23478)

It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds reads. An attacker could possibly use this issue to crash the program or extract sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-23613)

Record
USN-6474-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xrdp
Alpine:v3.15
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.16
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.17
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.18
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.19
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.20
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.21
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.22
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.23
 before 0.9.18.1-r0
0.9.18.1-r0
xrdp
Alpine:v3.24
 before 0.9.18.1-r0
0.9.18.1-r0
Show 18 moreShow less
Affected packages
PackageAffectedFixed
xrdp
Debian:12
 before 0.9.17-2.1
0.9.17-2.1
xrdp
Debian:13
 before 0.9.17-2.1
0.9.17-2.1
xrdp
Debian:14
 before 0.9.17-2.1
0.9.17-2.1
xrdp
Ubuntu:Pro:14.04:LTS
 before 0.6.0-1ubuntu0.1+esm3, plus listed versions
0.6.0-10.6.0-1ubuntu0.10.6.0-1ubuntu0.1+esm10.6.0-1ubuntu0.1+esm2
0.6.0-1ubuntu0.1+esm3
xrdp
Ubuntu:Pro:16.04:LTS
 before 0.6.1-2ubuntu0.3+esm3, plus listed versions
0.6.1-20.6.1-2ubuntu0.10.6.1-2ubuntu0.30.6.1-2ubuntu0.3+esm10.6.1-2ubuntu0.3+esm2
0.6.1-2ubuntu0.3+esm3
xrdp
Ubuntu:Pro:18.04:LTS
 before 0.9.5-2ubuntu0.1~esm2, plus listed versions
0.9.1-90.9.4-10.9.4-20.9.4-30.9.4-4
Show 5 moreShow less
0.9.4-50.9.5-10.9.5-1build10.9.5-20.9.5-2ubuntu0.1~esm1
0.9.5-2ubuntu0.1~esm2
xrdp
Ubuntu:Pro:20.04:LTS
 before 0.9.12-1ubuntu0.1+esm1, plus listed versions
0.9.9-10.9.12-10.9.12-1ubuntu0.1
0.9.12-1ubuntu0.1+esm1
xrdp
Ubuntu:Pro:22.04:LTS
 before 0.9.17-2ubuntu2+esm1, plus listed versions
0.9.15-1ubuntu10.9.17-10.9.17-20.9.17-2ubuntu10.9.17-2ubuntu2
0.9.17-2ubuntu2+esm1
xrdp
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.9.21.1-10.9.24-20.9.24-30.9.24-3build10.9.24-3build20.9.24-40.9.24-4ubuntu0.1~esm10.9.24-4ubuntu0.1
 None known
xrdp
Ubuntu:25.10
 All versions, plus listed versions
0.10.1-30.10.1-3.10.10.1-3.1+deb13u1build0.25.10.1
 None known
xrdp
Ubuntu:26.10
 All versions, plus listed versions
0.10.1-4.10.10.6.1-2ubuntu1
 None known
xrdp
Ubuntu:26.04:LTS
 All versions, plus listed versions
0.10.1-3.10.10.1-40.10.1-4.10.10.1-4.1ubuntu0.1
 None known
xrdp
Ubuntu:Pro:14.04:LTS
From an advisory covering 13 CVEs
 before 0.6.0-1ubuntu0.1+esm3, plus listed versions
0.6.0-10.6.0-1ubuntu0.10.6.0-1ubuntu0.1+esm10.6.0-1ubuntu0.1+esm2
0.6.0-1ubuntu0.1+esm3
xrdp
Ubuntu:Pro:16.04:LTS
From an advisory covering 13 CVEs
 before 0.6.1-2ubuntu0.3+esm3, plus listed versions
0.6.1-20.6.1-2ubuntu0.10.6.1-2ubuntu0.30.6.1-2ubuntu0.3+esm10.6.1-2ubuntu0.3+esm2
0.6.1-2ubuntu0.3+esm3
xrdp
Ubuntu:Pro:18.04:LTS
From an advisory covering 13 CVEs
 before 0.9.5-2ubuntu0.1~esm2, plus listed versions
0.9.1-90.9.4-10.9.4-20.9.4-30.9.4-4
Show 5 moreShow less
0.9.4-50.9.5-10.9.5-1build10.9.5-20.9.5-2ubuntu0.1~esm1
0.9.5-2ubuntu0.1~esm2
xrdp
Ubuntu:Pro:20.04:LTS
From an advisory covering 13 CVEs
 before 0.9.12-1ubuntu0.1+esm1, plus listed versions
0.9.9-10.9.12-10.9.12-1ubuntu0.1
0.9.12-1ubuntu0.1+esm1
xrdp
Ubuntu:Pro:22.04:LTS
From an advisory covering 13 CVEs
 before 0.9.17-2ubuntu2+esm1, plus listed versions
0.9.15-1ubuntu10.9.17-10.9.17-20.9.17-2ubuntu10.9.17-2ubuntu2
0.9.17-2ubuntu2+esm1
xrdp
openSUSE:Tumbleweed
 before 0.9.19-1.1
0.9.19-1.1

History

History
RecordedChangedSources
affected, factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-23613 is a high vulnerability (CVSS 7.8) in Neutrinolabs Xrdp, published February 7, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in xrdp 0.9.18.1-r0.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open