xrdp vulnerabilities (Debian)
41 vulnerabilities.
-
xrdpDebian xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY) 5.3 Medium -
xrdpDebian xrdp: No authentication required with Xvnc backend on RHEL 9 8.0 High -
xrdpDebian xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads 5.3 Medium -
xrdpDebian xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER 7.5 High -
xrdpDebian xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification 5.3 Medium -
xrdpDebian xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow 8.8 High -
xrdpDebian xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control) 6.5 Medium -
xrdpDebian XRDP is vulnerable to a server timing attack, leading to user enumeration 5.3 Medium -
xrdpDebian xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass 8.2 High -
xrdpDebian xrdp: lib_palette_update Heap Buffer Overflow & RCE 9.8 Critical -
xrdpDebian xrdp: Heap buffer overflow in EGFX channel 8.7 High -
xrdpDebian xrdp: Pre-authentication out-of-bounds reads in channel parsers 8.7 High -
xrdpDebian xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman 6.3 Medium -
xrdpDebian xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation 6.3 Medium -
xrdpDebian xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers 7.7 High -
xrdpDebian xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly 7.7 High -
xrdpDebian xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode 9.3 Critical -
xrdpDebian xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails 8.8 High -
xrdpDebian xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow 9.1 Critical -
xrdpDebian xrdp allows an ininite number of login attempts 7.2 High -
xrdpDebian Unchecked access to font glyph info in xrdp 4.6 Medium -
xrdpDebian Improper handling of session establishment errors in xrdp 2.6 Low -
xrdpDebian Buffer Overflow in xrdp 9.1 Critical -
xrdpDebian Integer Overflow in xrdp 8.2 High -
xrdpDebian Out-of-Bound Read in libxrdp 7.5 High -
xrdpDebian Out-of-Bound Read in xrdp 0.0 None -
xrdpDebian Out-of-Bound Read in xrdp 0.0 None -
xrdpDebian Buffer Overflow in xrdp 9.1 Critical -
xrdpDebian Buffer Overflow occurs in xrdp 9.1 Critical -
xrdpDebian Out of Bound Write in xrdp 9.1 Critical -
xrdpDebian Buffer Overflow in xrdp 6.5 Medium -
xrdpDebian Out of Bound Read in xrdp 9.1 Critical -
xrdpDebian Privilege escalation on xrdp 7.8 High -
xrdpDebian Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it 7.5 High -
xrdpDebian xrdp - regression update No score -
xrdpDebian The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0... 8.4 High -
xrdpDebian xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM... 7.3 High -
xrdpDebian An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp... 9.8 Critical -
xrdpDebian The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows... 7.5 High -
xrdpDebian Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier... 7.5 High -
xrdpDebian Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and... 7.5 High