Vulnerability in Neutrinolabs Xrdp
CVE-2023-40184
xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.
EPSS: 0.007 (50.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L.
Affected products
- Neutrinolabs Xrdp — versions < 0.9.23
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Product, x_refsource_MISC)
- security-advisories@github.com (Mailing List)
- security-advisories@github.com (Mailing List)
- security-advisories@github.com (Mailing List)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2023-40184?
- CVE-2023-40184 is a low-severity vulnerability in Neutrinolabs Xrdp, classified under Improper Handling of Exceptional Conditions. CVSS score: 2.6/10. Published 2023-08-30.
- How severe is CVE-2023-40184?
- Low severity. CVSS v3 base score is 2.6 out of 10.
- Is CVE-2023-40184 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.