CVE catalog

CVE-2023-40184

xrdp vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 4.8CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.85% · Oct 25, 2026

xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxrdpsid0.10.6.1-3fixed
Debianxrdpforky0.10.6.1-3fixed
Debianxrdptrixie0.10.1-3.1+deb13u2fixed
Debianxrdptrixie-security0.10.1-3.1+deb13u2fixed
Debianxrdpbookworm0.9.21.1-1+deb12u2fixed
Debianxrdpbookworm-security0.9.21.1-1+deb12u3fixed
Ubuntuxrdpnoble0.9.24-4ubuntu0.1~esm1fixed
Ubuntuxrdpnoble0.9.21.1-1+deb12u1fixed
Ubuntuxrdppro0.9.21.1-1vulnerable
Ubuntuxrdppro0.9.24-2vulnerable
Ubuntuxrdppro0.9.24-3vulnerable
Ubuntuxrdppro0.9.24-3build1vulnerable
Ubuntuxrdppro0.9.24-3build2vulnerable
Ubuntuxrdppro0.9.24-4vulnerable
Ubuntuxrdppro0.9.24-4ubuntu0.1~esm1fixed
Ubuntuxrdppro0.9.21.1-1vulnerable
Ubuntuxrdppro0.9.24-2vulnerable
Ubuntuxrdppro0.9.24-3vulnerable
Ubuntuxrdppro0.9.24-3build1vulnerable
Ubuntuxrdppro0.9.24-3build2vulnerable
Ubuntuxrdppro0.9.24-4vulnerable
Ubuntuxrdppro0.9.24-4ubuntu0.1~esm1fixed
Ubuntuxrdp25.100.10.1-3vulnerable
Ubuntuxrdp25.100.10.1-3.1vulnerable
Ubuntuxrdp25.100.10.1-3.1+deb13u1build0.25.10.1fixed
Susexrdplinux enterprise server 12 sp50.9.10-3.16.1fixed
Susexrdplinux enterprise server for sap applications 12 sp50.9.10-3.16.1fixed
Susexrdplinux enterprise server 12 sp50.9.10-3.11.1fixed
Susexrdplinux enterprise server for sap applications 12 sp50.9.10-3.11.1fixed
Opensusexrdptumbleweed0.9.23.1-1.1fixed
Susexrdplinux enterprise module for basesystem 15 sp40.9.13.1-150200.4.24.1fixed
Susexrdplinux enterprise module for basesystem 15 sp50.9.13.1-150200.4.24.1fixed
Susexrdpmanager proxy 4.20.9.13.1-150200.4.24.1fixed
Susexrdpmanager server 4.20.9.13.1-150200.4.24.1fixed
Opensusexrdpleap 15.40.9.13.1-150200.4.24.1fixed
Opensusexrdpleap 15.50.9.13.1-150200.4.24.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxrdpsourcesid0.9.24-2not yet assignedNot reported[1051061]
Debianxrdpsourceforky0.9.24-2not yet assignedNot reported[1051061]
Debianxrdpsourcetrixie0.9.24-2not yet assignedNot reported[1051061]
Debianxrdpsourcebookworm0.9.21.1-1+deb12u1not yet assignedNot reported[1051061]
Ubuntuxrdpdebnoble0.9.24-4ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntuxrdpdebnoble0.9.21.1-1+deb12u1Not reportedNot reportedNot reported
Ubuntuxrdpdebpro0.9.24-4ubuntu0.1~esm1Not reportedUBUNTU-CVE-2023-40184Not reported
Ubuntuxrdpdebpro0.9.24-4ubuntu0.1~esm1Not reportedUSN-8476-1Not reported
Ubuntuxrdpdeb25.100.10.1-3.1+deb13u1build0.25.10.1Not reportedUSN-8476-1Not reported
Susexrdprpmlinux enterprise server 12 sp50.9.10-3.16.1Not reportedSUSE-SU-2023:4873-1Not reported
Susexrdprpmlinux enterprise server for sap applications 12 sp50.9.10-3.16.1Not reportedSUSE-SU-2023:4873-1Not reported
Susexrdprpmlinux enterprise server 12 sp50.9.10-3.11.1Not reportedSUSE-SU-2023:3735-1Not reported
Susexrdprpmlinux enterprise server for sap applications 12 sp50.9.10-3.11.1Not reportedSUSE-SU-2023:3735-1Not reported
Opensusexrdprpmtumbleweed0.9.23.1-1.1Not reportedOPENSUSE-SU-2024:13399-1Not reported
Susexrdprpmlinux enterprise module for basesystem 15 sp40.9.13.1-150200.4.24.1Not reportedSUSE-SU-2023:3830-1Not reported
Susexrdprpmlinux enterprise module for basesystem 15 sp50.9.13.1-150200.4.24.1Not reportedSUSE-SU-2023:3830-1Not reported
Susexrdprpmmanager proxy 4.20.9.13.1-150200.4.24.1Not reportedSUSE-SU-2023:3830-1Not reported
Susexrdprpmmanager server 4.20.9.13.1-150200.4.24.1Not reportedSUSE-SU-2023:3830-1Not reported
Opensusexrdprpmleap 15.40.9.13.1-150200.4.24.1Not reportedSUSE-SU-2023:3830-1Not reported
Opensusexrdprpmleap 15.50.9.13.1-150200.4.24.1Not reportedSUSE-SU-2023:3830-1Not reported

[Debian bug #1051061]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]