CVE-2022-23613 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-23613 Interim 1 18 2025-02-16T03:10:13Z current 2022-02-09T02:43:43Z 2025-02-16T03:10:13Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-23613 xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed libpainter0 libpainter0-0.9.19-1.1 librfxencode0 librfxencode0-0.9.19-1.1 xrdp xrdp-0.9.19-1.1 xrdp-devel xrdp-devel-0.9.19-1.1 libpainter0-0.9.19-1.1 as a component of openSUSE Tumbleweed librfxencode0-0.9.19-1.1 as a component of openSUSE Tumbleweed xrdp-0.9.19-1.1 as a component of openSUSE Tumbleweed xrdp-devel-0.9.19-1.1 as a component of openSUSE Tumbleweed xrdp as a component of HPE Helion OpenStack 8 libpainter0 as a component of SUSE CaaS Platform 4.0 librfxencode0 as a component of SUSE CaaS Platform 4.0 xrdp as a component of SUSE CaaS Platform 4.0 xrdp-devel as a component of SUSE CaaS Platform 4.0 xrdp as a component of SUSE Enterprise Storage 6 xrdp as a component of SUSE Enterprise Storage 7 xrdp as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libpainter0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS librfxencode0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS xrdp as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS xrdp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpainter0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS librfxencode0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS xrdp as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS xrdp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libpainter0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS librfxencode0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS xrdp as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS xrdp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libpainter0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS librfxencode0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xrdp as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xrdp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libpainter0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS librfxencode0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xrdp as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xrdp-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libpainter0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 librfxencode0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 xrdp as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 xrdp-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpainter0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 librfxencode0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 xrdp as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 xrdp-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libpainter0 as a component of SUSE Linux Enterprise Real Time 15 SP2 librfxencode0 as a component of SUSE Linux Enterprise Real Time 15 SP2 xrdp as a component of SUSE Linux Enterprise Real Time 15 SP2 xrdp-devel as a component of SUSE Linux Enterprise Real Time 15 SP2 xrdp as a component of SUSE Linux Enterprise Server 12 SP2-BCL xrdp as a component of SUSE Linux Enterprise Server 12 SP3-BCL xrdp as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS xrdp as a component of SUSE Linux Enterprise Server 12 SP3-LTSS xrdp as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xrdp as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xrdp as a component of SUSE Linux Enterprise Server 12 SP5 libpainter0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS librfxencode0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS xrdp as a component of SUSE Linux Enterprise Server 15 SP1-LTSS xrdp-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libpainter0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS librfxencode0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xrdp as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xrdp-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xrdp as a component of SUSE Linux Enterprise Server 15-ESPOS libpainter0 as a component of SUSE Linux Enterprise Server 15-LTSS librfxencode0 as a component of SUSE Linux Enterprise Server 15-LTSS xrdp as a component of SUSE Linux Enterprise Server 15-LTSS xrdp-devel as a component of SUSE Linux Enterprise Server 15-LTSS xrdp as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 xrdp as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 xrdp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xrdp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xrdp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libpainter0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 librfxencode0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 xrdp as a component of SUSE Linux Enterprise Server for SAP Applications 15 xrdp-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libpainter0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 librfxencode0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 xrdp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 xrdp-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libpainter0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 librfxencode0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xrdp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xrdp-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xrdp as a component of SUSE Manager Proxy 4.1 xrdp as a component of SUSE Manager Retail Branch Server 4.1 xrdp as a component of SUSE Manager Server 4.1 xrdp as a component of SUSE OpenStack Cloud 8 xrdp as a component of SUSE OpenStack Cloud 9 xrdp as a component of SUSE OpenStack Cloud Crowbar 8 xrdp as a component of SUSE OpenStack Cloud Crowbar 9 xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds. CVE-2022-23613 openSUSE Tumbleweed:libpainter0-0.9.19-1.1 openSUSE Tumbleweed:librfxencode0-0.9.19-1.1 openSUSE Tumbleweed:xrdp-0.9.19-1.1 openSUSE Tumbleweed:xrdp-devel-0.9.19-1.1 HPE Helion OpenStack 8:xrdp SUSE CaaS Platform 4.0:libpainter0 SUSE CaaS Platform 4.0:librfxencode0 SUSE CaaS Platform 4.0:xrdp SUSE CaaS Platform 4.0:xrdp-devel SUSE Enterprise Storage 6:xrdp SUSE Enterprise Storage 7:xrdp SUSE Linux Enterprise High Performance Computing 12 SP5:xrdp SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpainter0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:librfxencode0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:xrdp SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:xrdp-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libpainter0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:librfxencode0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xrdp SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xrdp-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libpainter0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:librfxencode0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:xrdp SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:xrdp-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libpainter0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:librfxencode0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xrdp SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xrdp-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libpainter0 SUSE Linux Enterprise High Performance Computing 15-LTSS:librfxencode0 SUSE Linux Enterprise High Performance Computing 15-LTSS:xrdp SUSE Linux Enterprise High Performance Computing 15-LTSS:xrdp-devel SUSE Linux Enterprise Module for Basesystem 15 SP3:libpainter0 SUSE Linux Enterprise Module for Basesystem 15 SP3:librfxencode0 SUSE Linux Enterprise Module for Basesystem 15 SP3:xrdp SUSE Linux Enterprise Module for Basesystem 15 SP3:xrdp-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:libpainter0 SUSE Linux Enterprise Module for Basesystem 15 SP4:librfxencode0 SUSE Linux Enterprise Module for Basesystem 15 SP4:xrdp SUSE Linux Enterprise Module for Basesystem 15 SP4:xrdp-devel SUSE Linux Enterprise Real Time 15 SP2:libpainter0 SUSE Linux Enterprise Real Time 15 SP2:librfxencode0 SUSE Linux Enterprise Real Time 15 SP2:xrdp SUSE Linux Enterprise Real Time 15 SP2:xrdp-devel SUSE Linux Enterprise Server 12 SP2-BCL:xrdp SUSE Linux Enterprise Server 12 SP3-BCL:xrdp SUSE Linux Enterprise Server 12 SP3-ESPOS:xrdp SUSE Linux Enterprise Server 12 SP3-LTSS:xrdp SUSE Linux Enterprise Server 12 SP4-ESPOS:xrdp SUSE Linux Enterprise Server 12 SP4-LTSS:xrdp SUSE Linux Enterprise Server 12 SP5:xrdp SUSE Linux Enterprise Server 15 SP1-LTSS:libpainter0 SUSE Linux Enterprise Server 15 SP1-LTSS:librfxencode0 SUSE Linux Enterprise Server 15 SP1-LTSS:xrdp SUSE Linux Enterprise Server 15 SP1-LTSS:xrdp-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libpainter0 SUSE Linux Enterprise Server 15 SP2-LTSS:librfxencode0 SUSE Linux Enterprise Server 15 SP2-LTSS:xrdp SUSE Linux Enterprise Server 15 SP2-LTSS:xrdp-devel SUSE Linux Enterprise Server 15-ESPOS:xrdp SUSE Linux Enterprise Server 15-LTSS:libpainter0 SUSE Linux Enterprise Server 15-LTSS:librfxencode0 SUSE Linux Enterprise Server 15-LTSS:xrdp SUSE Linux Enterprise Server 15-LTSS:xrdp-devel SUSE Linux Enterprise Server Business Critical Linux 15 SP1:xrdp SUSE Linux Enterprise Server Business Critical Linux 15 SP2:xrdp SUSE Linux Enterprise Server for SAP Applications 12 SP3:xrdp SUSE Linux Enterprise Server for SAP Applications 12 SP4:xrdp SUSE Linux Enterprise Server for SAP Applications 12 SP5:xrdp SUSE Linux Enterprise Server for SAP Applications 15 SP1:libpainter0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:librfxencode0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:xrdp SUSE Linux Enterprise Server for SAP Applications 15 SP1:xrdp-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:libpainter0 SUSE Linux Enterprise Server for SAP Applications 15 SP2:librfxencode0 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xrdp SUSE Linux Enterprise Server for SAP Applications 15 SP2:xrdp-devel SUSE Linux Enterprise Server for SAP Applications 15:libpainter0 SUSE Linux Enterprise Server for SAP Applications 15:librfxencode0 SUSE Linux Enterprise Server for SAP Applications 15:xrdp SUSE Linux Enterprise Server for SAP Applications 15:xrdp-devel SUSE Manager Proxy 4.1:xrdp SUSE Manager Retail Branch Server 4.1:xrdp SUSE Manager Server 4.1:xrdp SUSE OpenStack Cloud 8:xrdp SUSE OpenStack Cloud 9:xrdp SUSE OpenStack Cloud Crowbar 8:xrdp SUSE OpenStack Cloud Crowbar 9:xrdp important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H