CyberRota Analysis
AI-GeneratedVersions of xrdp prior to 0.10.6.1 are vulnerable to an integer overflow in the vnc-any connection mode, allowing a malicious remote VNC server to manipulate image dimensions and trigger an out-of-bounds read. This can lead to the disclosure of sensitive information from heap memory or result in a denial of service due to process crashes. Organizations using affected versions should prioritize patching to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer size calculation, resulting in an undersized allocation. Subsequent processing of the incoming image data using the original oversized parameters leads to an out-of-bounds read. An unauthenticated remote attacker could exploit this flaw to disclose sensitive information from the heap memory or cause a denial of service (DoS) via a process crash. This issue has been fixed in version 0.10.6.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)