ROS-20221222-01

A vulnerability in the audin_send_open function of the xrdp server is related to the possibility of a stacked buffer overflow.
Exploitation of the vulnerability could allow an attacker acting remotely to gain access to a remote
machine

Vulnerability in devredir_proc_client_devlist_announce_req() function of XRDP server is related to buffer copying without checking input data size.
buffer without checking the size of the input data. Exploiting the vulnerability could allow an attacker,
acting remotely, to execute arbitrary code

Vulnerability of XRDP server’s xrdp_mm_trans_process_drdynvc_channel_open function is related to the ability to write
outside of a buffer in memory. Exploitation of the vulnerability could allow a remote attacker,
gain access to a remote machine

A vulnerability in the xrdp_mm_trans_process_drdynvc_channel_close() function of the XRDP server is related to the ability to read outside of a buffer in memory.
buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely,
gain unauthorized access to protected information or cause a denial of service

A vulnerability in the xrdp_mm_process_rail_update_window_text() function of the XRDP server is associated with an integer
overflow. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary code

Vulnerability of XRDP server’s xrdp_login_wnd_create() function is related to buffer copying without checking input data size.
the size of the input data. Exploitation of the vulnerability could allow an attacker acting remotely,
execute arbitrary code

Vulnerability of XRDP server’s xrdp_caps_process_confirm_active() function is related to reading outside the buffer boundaries
in memory. Exploitation of the vulnerability could allow an attacker acting remotely to gain
unauthorized access to protected information or cause a denial of service

Vulnerability in the xrdp_mm_chan_data_in() function of the XRDP server is related to buffer copying without checking the size of the input data.
the size of the input data. Exploitation of the vulnerability could allow an attacker acting remotely,
execute arbitrary code

A vulnerability in the libxrdp_send_to_channel() function of the XRDP server is related to reading outside of buffer boundaries in
memory. Exploitation of the vulnerability could allow an attacker acting remotely to gain
unauthorized access to protected information

Vulnerability of xrdp_sec_process_mcs_data_CS_CORE() function of XRDP server is related to reading outside the buffer in memory.
buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to gain
unauthorized access to protected information or cause a denial of service