{"id":"CVE-2023-40184","aliases":["ALPINE-CVE-2023-40184","DEBIAN-CVE-2023-40184","DLA-4166-1","EUVD-2023-44784","GHSA-f489-557v-47jq","MGASA-2023-0276","SUSE-SU-2023:3735-1","SUSE-SU-2023:3830-1","SUSE-SU-2023:4873-1","UBUNTU-CVE-2023-40184","USN-6474-1","USN-8476-1","openSUSE-SU-2024:13399-1"],"status":"published","title":"Improper handling of session establishment errors in xrdp","description":"xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.","severity":{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00853,"percentile":0.58596,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-755"],"published":"2023-08-30T17:48:30Z","modified":"2026-11-03T06:32:48Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"xrdp","fixed_in":["0.9.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"xrdp","fixed_in":["0.9.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"xrdp","fixed_in":["0.9.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"xrdp","fixed_in":["0.9.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xrdp","fixed_in":["0.9.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xrdp","fixed_in":["0.9.23-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xrdp","fixed_in":["0.9.23-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xrdp","fixed_in":["0.9.21.1-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xrdp","fixed_in":["0.9.24-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xrdp","fixed_in":["0.9.24-2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"xrdp","fixed_in":["0.9.23-1.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"xrdp","fixed_in":["0.9.23-1.mga9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xrdp","fixed_in":["0.9.10-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xrdp","fixed_in":["0.9.10-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"xrdp","fixed_in":["0.9.13.1-150200.4.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"xrdp","fixed_in":["0.9.13.1-150200.4.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"xrdp","fixed_in":["0.9.13.1-150200.4.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"xrdp","fixed_in":["0.9.13.1-150200.4.24.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"xrdp","fixed_in":["0.9.13.1-150200.4.24.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"xrdp","fixed_in":["0.9.13.1-150200.4.24.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xrdp","fixed_in":["0.6.0-1ubuntu0.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xrdp","fixed_in":["0.6.1-2ubuntu0.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xrdp","fixed_in":["0.9.5-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xrdp","fixed_in":["0.9.12-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"xrdp","fixed_in":["0.9.17-2ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"xrdp","fixed_in":["0.9.24-4ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.21.1-1+deb12u1"}]}],"versions":["0.9.21.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.24-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.24-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.21.1-1~deb11u2"}]}],"versions":["0.9.12-1.1","0.9.15-1","0.9.17-1","0.9.17-2","0.9.17-2.1","0.9.19-1","0.9.21.1-1~deb11u1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:8","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-1.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23-1.mga9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.13.1-150200.4.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.13.1-150200.4.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.13.1-150200.4.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.13.1-150200.4.24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.13.1-150200.4.24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.13.1-150200.4.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-1ubuntu0.1+esm3"}]}],"versions":["0.6.0-1","0.6.0-1ubuntu0.1","0.6.0-1ubuntu0.1+esm1","0.6.0-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.3+esm3"}]}],"versions":["0.6.1-2","0.6.1-2ubuntu0.1","0.6.1-2ubuntu0.3","0.6.1-2ubuntu0.3+esm1","0.6.1-2ubuntu0.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.5-2ubuntu0.1~esm2"}]}],"versions":["0.9.1-9","0.9.4-1","0.9.4-2","0.9.4-3","0.9.4-4","0.9.4-5","0.9.5-1","0.9.5-1build1","0.9.5-2","0.9.5-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-1ubuntu0.1+esm1"}]}],"versions":["0.9.9-1","0.9.12-1","0.9.12-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.17-2ubuntu2+esm1"}]}],"versions":["0.9.15-1ubuntu1","0.9.17-1","0.9.17-2","0.9.17-2ubuntu1","0.9.17-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.24-4ubuntu0.1~esm1"}]}],"versions":["0.9.21.1-1","0.9.24-2","0.9.24-3","0.9.24-3build1","0.9.24-3build2","0.9.24-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-1ubuntu0.1+esm3"}]}],"versions":["0.6.0-1","0.6.0-1ubuntu0.1","0.6.0-1ubuntu0.1+esm1","0.6.0-1ubuntu0.1+esm2"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.3+esm3"}]}],"versions":["0.6.1-2","0.6.1-2ubuntu0.1","0.6.1-2ubuntu0.3","0.6.1-2ubuntu0.3+esm1","0.6.1-2ubuntu0.3+esm2"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.5-2ubuntu0.1~esm2"}]}],"versions":["0.9.1-9","0.9.4-1","0.9.4-2","0.9.4-3","0.9.4-4","0.9.4-5","0.9.5-1","0.9.5-1build1","0.9.5-2","0.9.5-2ubuntu0.1~esm1"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-1ubuntu0.1+esm1"}]}],"versions":["0.9.9-1","0.9.12-1","0.9.12-1ubuntu0.1"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.17-2ubuntu2+esm1"}]}],"versions":["0.9.15-1ubuntu1","0.9.17-1","0.9.17-2","0.9.17-2ubuntu1","0.9.17-2ubuntu2"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.5-2ubuntu0.1~esm3"}]}],"versions":["0.9.1-9","0.9.4-1","0.9.4-2","0.9.4-3","0.9.4-4","0.9.4-5","0.9.5-1","0.9.5-1build1","0.9.5-2","0.9.5-2ubuntu0.1~esm1","0.9.5-2ubuntu0.1~esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-1ubuntu0.1+esm2"}]}],"versions":["0.9.9-1","0.9.12-1","0.9.12-1ubuntu0.1","0.9.12-1ubuntu0.1+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.17-2ubuntu3+esm2"}]}],"versions":["0.9.15-1ubuntu1","0.9.17-1","0.9.17-2","0.9.17-2ubuntu1","0.9.17-2ubuntu2","0.9.17-2ubuntu2+esm1","0.9.17-2ubuntu3","0.9.17-2ubuntu3+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.24-4ubuntu0.1~esm1"}]}],"versions":["0.9.21.1-1","0.9.24-2","0.9.24-3","0.9.24-3build1","0.9.24-3build2","0.9.24-4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-3.1+deb13u1build0.25.10.1"}]}],"versions":["0.10.1-3","0.10.1-3.1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xrdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.23.1-1.1"}]}],"bundled":2}],"products":[{"vendor":"neutrinolabs","product":"xrdp"}],"references":[{"url":"https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-f489-557v-47jq","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://github.com/neutrinolabs/xrdp/commit/a111a0fdfe2421ef600e40708b5f0168594cfb23","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/neutrinolabs/xrdp/blame/9bbb2ec68f390504c32f2062847aa3d821a0089a/sesman/sesexec/session.c#L571C5-L571C19","tags":["x_refsource_MISC","x_transferred","Product","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5IXMQODV3OIJ7DRQBUQV7PUKNT7SH36/","tags":["x_transferred","Mailing List","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SOT237TIHTHPX5YNIWLVNINOEYC7WMG2/","tags":["x_transferred","Mailing List","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URO3FKTFBPNKFARAQBEJLI4MH6YS35P5/","tags":["x_transferred","Mailing List","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00018.html","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-40184","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40184.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40184","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-40184","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0276.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32276","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40184","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233735-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214805","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40184","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233830-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234873-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215803","tags":["report"]},{"url":"https://bugzilla.suse.com/1217759","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42822","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-40184","tags":["report"]},{"url":"https://github.com/neutrinolabs/xrdp/commit/25a1fab5b6c5ef2a8bb109232b765cb8b332ce5e","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6474-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8476-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-23468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23479","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23480","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23481","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23493","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-42822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-39917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68670","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-40184","title":"Improper handling of session establishment errors in xrdp","description":"xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-08-30T17:48:30.552Z","modified":"2025-11-03T19:28:18.386Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-44784","description":"xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-08-30T17:48:30Z","modified":"2025-11-03T19:28:18Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T19:49:34.152725Z"}],"nvd":[{"id":"CVE-2023-40184","description":"xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-08-30T18:15:09.69Z","modified":"2026-06-17T06:16:36.633Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:08:25.025396Z"}],"osv":[{"id":"ALPINE-CVE-2023-40184","description":"xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-08-30T18:15:09.69Z","modified":"2026-11-03T06:32:48.847116194Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"CVE-2023-40184","title":"Improper handling of session establishment errors in xrdp","description":"xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-08-30T17:48:30.552Z","modified":"2026-10-28T02:30:39.072981308Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DEBIAN-CVE-2023-40184","description":"xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-08-30T18:15:09.69Z","modified":"2026-10-26T18:02:32.444289893Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"UBUNTU-CVE-2023-40184","description":"xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.","status":"published","published":"2023-08-30T18:15:00Z","modified":"2026-06-25T23:59:17.343364154Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"DLA-4166-1","title":"xrdp - security update","status":"published","published":"2025-05-16T00:00:00Z","modified":"2026-03-09T01:19:58.050706Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0276","title":"Updated xrdp packages fix security vulnerability","description":"In versions prior to 0.9.23 improper handling of session establishment\nerrors allows bypassing OS-level session restrictions. The\n`auth_start_session` function can return non-zero (1) value on, e.g.,\nPAM error which may result in session restrictions such as max\nconcurrent sessions per user by PAM (ex ./etc/security/limits.conf) to\nbe bypassed. (CVE-2023-40184)\n","status":"published","published":"2023-09-30T19:15:40Z","modified":"2026-05-30T05:15:05.969037237Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13399-1","title":"libpainter0-0.9.23.1-1.1 on GA media","description":"These are all security issues fixed in the libpainter0-0.9.23.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:25.770425Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2023:3735-1","title":"Security update for xrdp","description":"This update for xrdp fixes the following issues:\n\n- CVE-2023-40184: Fixed restriction bypass via improper session handling (bsc#1214805).","status":"published","published":"2023-09-22T13:04:30Z","modified":"2026-02-04T03:30:00.555481Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3830-1","title":"Security update for xrdp","description":"This update for xrdp fixes the following issues:\n\n- CVE-2023-40184: Fixed restriction bypass via improper session handling (bsc#1214805).","status":"published","published":"2023-09-27T17:14:51Z","modified":"2026-02-04T02:24:18.848779Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:4873-1","title":"Security update for xrdp","description":"This update for xrdp fixes the following issues:\n\n- CVE-2023-42822: Fixed unchecked access to font glyph info (bsc#1215803).\n- CVE-2023-40184: Fixed restriction bypass via improper session handling (bsc#1214805).\n","status":"published","published":"2023-12-14T18:52:09Z","modified":"2026-02-04T03:34:05.949314Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-6474-1","title":"xrdp vulnerabilities","description":"It was discovered that xrdp incorrectly handled validation of\nclient-supplied data, which could lead to out-of-bounds reads. An attacker\ncould possibly use this issue to crash the program or extract sensitive\ninformation. (CVE-2022-23479, CVE-2022-23481, CVE-2022-23483,\nCVE-2023-42822)\n\nIt was discovered that xrdp improperly handled session establishment\nerrors. An attacker could potentially use this issue to bypass the\nOS-level session restrictions by PAM. (CVE-2023-40184)\n\nIt was discovered that xrdp incorrectly handled validation of\nclient-supplied data, which could lead to out-of-bounds writes. An attacker\ncould possibly use this issue to cause memory corruption or execute\narbitrary code. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-23468)\n\nIt was discovered that xrdp incorrectly handled validation of\nclient-supplied data, which could lead to out-of-bounds reads. An attacker\ncould possibly use this issue to crash the program or extract sensitive\ninformation. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS\nand Ubuntu 22.04 LTS. (CVE-2022-23480, CVE-2022-23482, CVE-2022-23484)\n\nIt was discovered that xrdp incorrectly handled validation of\nclient-supplied data, which could lead to out-of-bounds reads. An attacker\ncould possibly use this issue to crash the program or extract sensitive\ninformation. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-23477, CVE-2022-23493)\n\nIt was discovered that xrdp incorrectly handled validation of\nclient-supplied data, which could lead to out-of-bounds writes. An attacker\ncould possibly use this issue to cause memory corruption or execute\narbitrary code. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-23478)\n\nIt was discovered that xrdp incorrectly handled validation of\nclient-supplied data, which could lead to out-of-bounds reads. An attacker\ncould possibly use this issue to crash the program or extract sensitive\ninformation. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-23613)\n","status":"published","published":"2023-11-08T13:47:00Z","modified":"2026-06-29T13:50:59.884369844Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-8476-1","title":"xrdp vulnerabilities","description":"It was discovered that xrdp incorrectly handled bounds checking when\nprocessing user domain information during the connection sequence. An\nunauthenticated remote attacker could use this issue to cause xrdp to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2025-68670)\n\nIt was discovered that xrdp did not correctly enforce the maximum number of\nlogin attempts configured by the MaxLoginRetry parameter. A remote attacker\ncould use this issue to perform an unlimited number of login attempts.\n(CVE-2024-39917)\n\nIt was discovered that xrdp did not perform bounds checking when accessing\nfont glyphs. Since some of this data is controllable by the user, a remote\nattacker could use this issue to cause xrdp to read out of bounds. This\nissue only affected Ubuntu 24.04 LTS. (CVE-2023-42822)\n\nIt was discovered that xrdp did not properly handle session establishment\nerrors. A remote attacker could use this issue to bypass OS-level session\nrestrictions enforced by PAM, such as the maximum number of concurrent\nsessions per user. This issue only affected Ubuntu 24.04 LTS.\n(CVE-2023-40184)","status":"published","published":"2026-06-25T14:47:42Z","modified":"2026-06-25T23:59:17.105152448Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}