CVE-2022-23481

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21

Description The issue is related to an Out of Bound Read in the xrdp caps process confirm active() function. This can allow a remote attacker to gain unauthorized access to protected information or cause a denial of service. There are no known workarounds for this issue.

Recommendations For versions prior to 0.9.21, users are advised to upgrade to a newer version to resolve the issue. As a temporary workaround, consider disabling the xrdp caps process confirm active() function until a patch is available.