Skip to contentNeutrinolabs Xrdp vulnerabilities
- neutrinolabs xrdpxrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)CVE-2026-55639Fix available5.3 Medium
- neutrinolabs xrdpxrdp: No authentication required with Xvnc backend on RHEL 9CVE-2026-55626Fix available8.0 High
- neutrinolabs xrdpxrdp: Malformed Confirm Active capability sets cause out-of-bounds readsCVE-2026-55238Fix available5.3 Medium
- neutrinolabs xrdpxrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADERCVE-2026-54538Fix available7.5 High
- neutrinolabs xrdpxrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verificationCVE-2026-44978Fix available5.3 Medium
- neutrinolabs xrdpxrdp: Channel Data Forwarding Fixed-Size Buffer OverflowCVE-2026-44178Fix available8.8 High
- neutrinolabs xrdpxrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)CVE-2026-55645Fix available6.5 Medium
- neutrinolabs xrdpXRDP is vulnerable to a server timing attack, leading to user enumerationCVE-2026-42218Fix available5.3 Medium
- neutrinolabs xrdpxrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR BypassCVE-2026-41521Fix available8.2 High
- neutrinolabs xrdpxrdp: lib_palette_update Heap Buffer Overflow & RCECVE-2026-41252Fix available9.8 Critical
- neutrinolabs xrdpxrdp: Heap buffer overflow in EGFX channelCVE-2026-35512Fix available8.7 High
- neutrinolabs xrdpxrdp: Pre-authentication out-of-bounds reads in channel parsersCVE-2026-33689Fix available8.7 High
- neutrinolabs xrdpxrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesmanCVE-2026-33145Fix available6.3 Medium
- neutrinolabs xrdpxrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculationCVE-2026-32624Fix available6.3 Medium
- neutrinolabs xrdpxrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsersCVE-2026-33516Fix available7.7 High
- neutrinolabs xrdpxrdp: Heap buffer overflow in NeutrinoRDP channel reassemblyCVE-2026-32623Fix available7.7 High
- neutrinolabs xrdpxrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS modeCVE-2026-32105Fix available9.3 Critical
- neutrinolabs xrdpxrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid failsCVE-2026-32107Fix available8.8 High
- neutrinolabs xrdp, debian linux +1 morexrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer OverflowCVE-2025-68670Fix available9.1 Critical
- neutrinolabs xrdpxrdp allows an ininite number of login attemptsCVE-2024-39917Fix available7.2 High
- neutrinolabs xrdp, fedoraproject fedora +1 moreUnchecked access to font glyph info in xrdpCVE-2023-42822Fix available4.6 Medium
- neutrinolabs xrdpImproper handling of session establishment errors in xrdpCVE-2023-40184Fix available2.6 Low
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdpCVE-2022-23477Fix available9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreInteger Overflow in xrdpCVE-2022-23484Fix available8.2 High
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in libxrdpCVE-2022-23483Fix available7.5 High
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in xrdpCVE-2022-23482Fix available0.0 None
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in xrdpCVE-2022-23481Fix available0.0 None
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdpCVE-2022-23480Fix available9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow occurs in xrdpCVE-2022-23479Fix available9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreOut of Bound Write in xrdpCVE-2022-23478Fix available9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdpCVE-2022-23468Fix available6.5 Medium
- neutrinolabs xrdp, debian linux +1 moreOut of Bound Read in xrdpCVE-2022-23493Fix available9.1 Critical
- neutrinolabs xrdp, fedoraproject fedora +1 morePrivilege escalation on xrdpCVE-2022-23613Fix available7.8 High
- neutrinolabs xrdpLocal users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate itCVE-2020-4044Fix available7.5 High
- neutrinolabs xrdp, debian linux +1 moreThe scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0...CVE-2017-16927Fix available8.4 High
- neutrinolabs xrdpxrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM...CVE-2017-6967Fix available7.3 High
- neutrinolabs xrdp, debian linux +1 moreAn issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp...CVE-2013-1430Fix available9.8 Critical