Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

SUSE-SU-2023:0033-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:0033-1

UNKNOWN

Security update for xrdp

Published Jan 5, 2023

Modified 3 years ago

Fix available

Details

This update for xrdp fixes the following issues:

CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300).
CVE-2022-23478: Fixed an out of bound write in xrdp_mm_trans_process_drdynvc_chan() (bsc#1206302).
CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303).
CVE-2022-23480: Fixed a buffer overflow in devredir_proc_client_devlist_announce_req() (bsc#1206306).
CVE-2022-23481: Fixed an out of bound read in xrdp_caps_process_confirm_active() (bsc#1206307).
CVE-2022-23482: Fixed an out of bound read in xrdp_sec_process_mcs_data_CS_CORE() (bsc#1206310).
CVE-2022-23483: Fixed an out of bound read in libxrdp_send_to_channel() (bsc#1206311).
CVE-2022-23484: Fixed a integer overflow in xrdp_mm_process_rail_update_window_text() (bsc#1206312).
CVE-2022-23493: Fixed an out of bound read in xrdp_mm_trans_process_drdynvc_channel_close() (bsc#1206313).

Affected Packages

SUSE:Enterprise Storage 7libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Enterprise Storage 7librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Enterprise Storage 7xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Enterprise Storage 7xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Enterprise Storage 7.1libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Enterprise Storage 7.1librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Enterprise Storage 7.1xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Enterprise Storage 7.1xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSlibpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSlibrfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSlibpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSlibrfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSxrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSxrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibrfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSxrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSxrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Real Time 15 SP3libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Real Time 15 SP3librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Real Time 15 SP3xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Real Time 15 SP3xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server 15 SP2-LTSSlibpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server 15 SP2-LTSSlibrfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibrfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server 15 SP3-LTSSxrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server 15 SP3-LTSSxrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Proxy 4.1libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Proxy 4.1librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Proxy 4.1xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Proxy 4.1xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Proxy 4.2libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Proxy 4.2librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Proxy 4.2xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Proxy 4.2xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Retail Branch Server 4.1libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Retail Branch Server 4.1librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Retail Branch Server 4.1xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Retail Branch Server 4.1xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Retail Branch Server 4.2libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Retail Branch Server 4.2librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Retail Branch Server 4.2xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Retail Branch Server 4.2xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Server 4.1libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Server 4.1librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Server 4.1xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Server 4.1xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Server 4.2libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Server 4.2librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Server 4.2xrdp

Fixed in:

0.9.13.1-150200.4.15.1

SUSE:Manager Server 4.2xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

openSUSE:Leap 15.4libpainter0

Fixed in:

0.9.13.1-150200.4.15.1

openSUSE:Leap 15.4librfxencode0

Fixed in:

0.9.13.1-150200.4.15.1

openSUSE:Leap 15.4xrdp

Fixed in:

0.9.13.1-150200.4.15.1

openSUSE:Leap 15.4xrdp-devel

Fixed in:

0.9.13.1-150200.4.15.1

References

REPORThttps://bugzilla.suse.com/1206300 REPORThttps://bugzilla.suse.com/1206302 REPORThttps://bugzilla.suse.com/1206303 REPORThttps://bugzilla.suse.com/1206306 REPORThttps://bugzilla.suse.com/1206307 REPORThttps://bugzilla.suse.com/1206310 REPORThttps://bugzilla.suse.com/1206311 REPORThttps://bugzilla.suse.com/1206312 REPORThttps://bugzilla.suse.com/1206313 WEBhttps://www.suse.com/security/cve/CVE-2022-23468 WEBhttps://www.suse.com/security/cve/CVE-2022-23478 WEBhttps://www.suse.com/security/cve/CVE-2022-23479 WEBhttps://www.suse.com/security/cve/CVE-2022-23480 WEBhttps://www.suse.com/security/cve/CVE-2022-23481 WEBhttps://www.suse.com/security/cve/CVE-2022-23482 WEBhttps://www.suse.com/security/cve/CVE-2022-23483 WEBhttps://www.suse.com/security/cve/CVE-2022-23484 WEBhttps://www.suse.com/security/cve/CVE-2022-23493 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20230033-1/

Upstream

CVE-2022-23468 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483 CVE-2022-23484 CVE-2022-23493

Related

CVE-2022-23468 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483 CVE-2022-23484 CVE-2022-23493

Ecosystems

SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.4

Timeline

PublishedJan 5, 2023

ModifiedJan 5, 2023