CVE-2022-23477 Buffer Overflow in xrdp

Q: Is CVE-2022-23477 being exploited?

There is no known exploitation of CVE-2022-23477 in the wild and no public exploit code.

Critical 9.1 Published 9 Dec 2022 Updated 23 Apr 2025

A buffer overflow in the xrdp RDP server allows attackers to execute arbitrary code or cause a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2022-23477?

CVE-2022-23477 is a critical memory corruption vulnerability in Debian Debian Linux, published on 9 Dec 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in audin_send_open() function. There are no known workarounds for this issue. Users are advised to upgrade.

Weakness: CWE-120

Which versions are affected by CVE-2022-23477?

It affects 2 products.

Linux distribution packages (15)

`xrdp` SUSE:Enterprise Storage 7	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Enterprise Storage 7.1	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise Module for Basesystem 15 SP4	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise Real Time 15 SP3	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise Server 15 SP2-LTSS	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise Server 15 SP3-LTSS	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Manager Proxy 4.2	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Manager Retail Branch Server 4.2	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` SUSE:Manager Server 4.2	All versions	`0.9.13.1-150200.4.18.1`
`xrdp` openSUSE:Leap 15.4	All versions	`0.9.13.1-150200.4.18.1`

Products include Debian Debian Linux, Neutrinolabs Xrdp.

How do I fix CVE-2022-23477?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2022-23477 being exploited?

There is no known exploitation of CVE-2022-23477 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2022-23477, GHSA-hqw2-jx2c-wrr2, SUSE-SU-2023:0151-1, UBUNTU-CVE-2022-23477.