Neutrinolabs vulnerabilities

Products

• Xrdp 37

Newest

• neutrinolabs xrdp xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY) CVE-2026-55639 Fix available 5.3 MediumJuly 20, 2026
• neutrinolabs xrdp xrdp: No authentication required with Xvnc backend on RHEL 9 CVE-2026-55626 Fix available 8.0 HighJuly 20, 2026
• neutrinolabs xrdp xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads CVE-2026-55238 Fix available 5.3 MediumJuly 20, 2026
• neutrinolabs xrdp xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER CVE-2026-54538 Fix available 7.5 HighJuly 20, 2026
• neutrinolabs xrdp xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification CVE-2026-44978 Fix available 5.3 MediumJuly 20, 2026
• neutrinolabs xrdp xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow CVE-2026-44178 Fix available 8.8 HighJuly 20, 2026
• neutrinolabs xrdp xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control) CVE-2026-55645 Fix available 6.5 MediumJuly 20, 2026
• neutrinolabs xrdp XRDP is vulnerable to a server timing attack, leading to user enumeration CVE-2026-42218 Fix available 5.3 MediumJuly 20, 2026
• neutrinolabs xrdp xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass CVE-2026-41521 Fix available 8.2 HighJuly 20, 2026
• neutrinolabs xrdp xrdp: lib_palette_update Heap Buffer Overflow & RCE CVE-2026-41252 Fix available 9.8 CriticalJuly 20, 2026
• neutrinolabs xrdp xrdp: Heap buffer overflow in EGFX channel CVE-2026-35512 Fix available 8.7 HighApril 17, 2026
• neutrinolabs xrdp xrdp: Pre-authentication out-of-bounds reads in channel parsers CVE-2026-33689 Fix available 8.7 HighApril 17, 2026
• neutrinolabs xrdp xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman CVE-2026-33145 Fix available 6.3 MediumApril 17, 2026
• neutrinolabs xrdp xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation CVE-2026-32624 Fix available 6.3 MediumApril 17, 2026
• neutrinolabs xrdp xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers CVE-2026-33516 Fix available 7.7 HighApril 17, 2026
• neutrinolabs xrdp xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly CVE-2026-32623 Fix available 7.7 HighApril 17, 2026
• neutrinolabs xrdp xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode CVE-2026-32105 Fix available 9.3 CriticalApril 17, 2026
• neutrinolabs xrdp xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails CVE-2026-32107 Fix available 8.8 HighApril 17, 2026
• neutrinolabs xrdp, debian linux +1 more xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow CVE-2025-68670 Fix available 9.1 CriticalJanuary 27, 2026
• neutrinolabs xrdp xrdp allows an ininite number of login attempts CVE-2024-39917 Fix available 7.2 HighJuly 12, 2024
• neutrinolabs xrdp, fedoraproject fedora +1 more Unchecked access to font glyph info in xrdp CVE-2023-42822 Fix available 4.6 MediumSeptember 27, 2023
• neutrinolabs xrdp Improper handling of session establishment errors in xrdp CVE-2023-40184 Fix available 2.6 LowAugust 30, 2023
• neutrinolabs xrdp, debian linux +1 more Buffer Overflow in xrdp CVE-2022-23477 Fix available 9.1 CriticalDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Integer Overflow in xrdp CVE-2022-23484 Fix available 8.2 HighDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Out-of-Bound Read in libxrdp CVE-2022-23483 Fix available 7.5 HighDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Out-of-Bound Read in xrdp CVE-2022-23482 Fix available 0.0 NoneDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Out-of-Bound Read in xrdp CVE-2022-23481 Fix available 0.0 NoneDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Buffer Overflow in xrdp CVE-2022-23480 Fix available 9.1 CriticalDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Buffer Overflow occurs in xrdp CVE-2022-23479 Fix available 9.1 CriticalDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Out of Bound Write in xrdp CVE-2022-23478 Fix available 9.1 CriticalDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Buffer Overflow in xrdp CVE-2022-23468 Fix available 6.5 MediumDecember 9, 2022
• neutrinolabs xrdp, debian linux +1 more Out of Bound Read in xrdp CVE-2022-23493 Fix available 9.1 CriticalDecember 9, 2022
• neutrinolabs xrdp, fedoraproject fedora +1 more Privilege escalation on xrdp CVE-2022-23613 Fix available 7.8 HighFebruary 7, 2022
• neutrinolabs xrdp Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it CVE-2020-4044 Fix available 7.5 HighJune 30, 2020
• neutrinolabs xrdp, debian linux +1 more The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0... CVE-2017-16927 Fix available 8.4 HighNovember 23, 2017
• neutrinolabs xrdp xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM... CVE-2017-6967 Fix available 7.3 HighMarch 17, 2017
• neutrinolabs xrdp, debian linux +1 more An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp... CVE-2013-1430 Fix available 9.8 CriticalDecember 16, 2016