CVE-2022-23483: Debian Linux

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in libxrdp_send_to_channel() function. There are no known workarounds for this issue. Users are advised to upgrade.

Affected products

• Debian Debian Linux: version 11.0 only
• Neutrinolabs Xrdp: before 0.9.21 (fixed in 0.9.21)

Published 2022-12-09. Last modified 2026-06-17.