CVE-2022-23613 - CVE House
Back to Database
Status published High CVE-2022-23613

Privilege escalation on xrdp

Vulnerability Description

xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-23613

Credits & Attribution

No credits recorded in the NVD database.

References

More from neutrinolabs

View All →
CVE-2025-68670
xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow
Critical 9.1
CVE-2024-39917
xrdp allows an ininite number of login attempts
High 7.2
CVE-2023-42822
Unchecked access to font glyph info in xrdp
Medium 4.6
CVE-2023-40184
Improper handling of session establishment errors in xrdp
Low 2.6
CVE-2022-23493
Out of Bound Read in xrdp
Critical 9.1

Affected Vendor

neutrinolabs

View all reports →

Affected Software

xrdp
Vulnerable Versions:
>= 0.9.17, < 0.9.18.1

Timeline

Official Publish: February 7th, 2022
Last Modified: April 23rd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-191

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1574 Hijack Execution Flow
Privilege Escalation
T1059 Command and Scripting Interpreter
Execution
T1485 Data Destruction
Impact
T1499 Endpoint Denial of Service
Impact