# neutrinolabs xrdp.

Every CVE that names neutrinolabs xrdp among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)](https://agentprime.io/advisories/CVE-2026-55639.md)
  `CVE-2026-55639` · CVE record: neutrinolabs xrdp · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption
- [xrdp: No authentication required with Xvnc backend on RHEL 9](https://agentprime.io/advisories/CVE-2026-55626.md)
  `CVE-2026-55626` · CVE record: neutrinolabs xrdp · CVSS 8.0 High · Not analysed yet · Published 20 Jul 2026 · Tags: Authentication bypass
- [xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads](https://agentprime.io/advisories/CVE-2026-55238.md)
  `CVE-2026-55238` · CVE record: neutrinolabs xrdp · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-126
- [xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER](https://agentprime.io/advisories/CVE-2026-54538.md)
  `CVE-2026-54538` · CVE record: neutrinolabs xrdp · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2026 · Tags: Denial of service
- [xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification](https://agentprime.io/advisories/CVE-2026-44978.md)
  `CVE-2026-44978` · CVE record: neutrinolabs xrdp · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption, CWE-20
- [xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow](https://agentprime.io/advisories/CVE-2026-44178.md)
  `CVE-2026-44178` · CVE record: neutrinolabs xrdp · CVSS 8.8 High · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption
- [xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)](https://agentprime.io/advisories/CVE-2026-55645.md)
  `CVE-2026-55645` · CVE record: neutrinolabs xrdp · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption
- [XRDP is vulnerable to a server timing attack, leading to user enumeration](https://agentprime.io/advisories/CVE-2026-42218.md)
  `CVE-2026-42218` · CVE record: neutrinolabs xrdp · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-204
- [xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass](https://agentprime.io/advisories/CVE-2026-41521.md)
  `CVE-2026-41521` · CVE record: neutrinolabs xrdp · CVSS 8.2 High · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption
- [xrdp: lib_palette_update Heap Buffer Overflow & RCE](https://agentprime.io/advisories/CVE-2026-41252.md)
  `CVE-2026-41252` · CVE record: neutrinolabs xrdp · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption
- [xrdp: Heap buffer overflow in EGFX channel](https://agentprime.io/advisories/CVE-2026-35512.md)
  `CVE-2026-35512` · CVE record: neutrinolabs xrdp · CVSS 8.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: Memory corruption
- [xrdp: Pre-authentication out-of-bounds reads in channel parsers](https://agentprime.io/advisories/CVE-2026-33689.md)
  `CVE-2026-33689` · CVE record: neutrinolabs xrdp · CVSS 8.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: Memory corruption
- [xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman](https://agentprime.io/advisories/CVE-2026-33145.md)
  `CVE-2026-33145` · CVE record: neutrinolabs xrdp · CVSS 6.3 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation](https://agentprime.io/advisories/CVE-2026-32624.md)
  `CVE-2026-32624` · CVE record: neutrinolabs xrdp · CVSS 6.3 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Memory corruption
- [xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers](https://agentprime.io/advisories/CVE-2026-33516.md)
  `CVE-2026-33516` · CVE record: neutrinolabs xrdp · CVSS 7.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: Memory corruption
- [xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly](https://agentprime.io/advisories/CVE-2026-32623.md)
  `CVE-2026-32623` · CVE record: neutrinolabs xrdp · CVSS 7.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: Memory corruption
- [xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode](https://agentprime.io/advisories/CVE-2026-32105.md)
  `CVE-2026-32105` · CVE record: neutrinolabs xrdp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-354
- [xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails](https://agentprime.io/advisories/CVE-2026-32107.md)
  `CVE-2026-32107` · CVE record: neutrinolabs xrdp · CVSS 8.8 High · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-273
- [xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow](https://agentprime.io/advisories/CVE-2025-68670.md)
  `CVE-2025-68670` · CVE record: neutrinolabs xrdp · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption
- [xrdp allows an ininite number of login attempts](https://agentprime.io/advisories/CVE-2024-39917.md)
  `CVE-2024-39917` · CVE record: neutrinolabs xrdp · CVSS 7.2 High · Not analysed yet · Published 12 Jul 2024 · Tags: Authentication bypass
- [Unchecked access to font glyph info in xrdp](https://agentprime.io/advisories/CVE-2023-42822.md)
  `CVE-2023-42822` · CVE record: neutrinolabs xrdp · CVSS 4.6 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Memory corruption
- [Improper handling of session establishment errors in xrdp](https://agentprime.io/advisories/CVE-2023-40184.md)
  `CVE-2023-40184` · CVE record: neutrinolabs xrdp · CVSS 2.6 Low · Not analysed yet · Published 30 Aug 2023 · Tags: CWE-755
- [Buffer Overflow in xrdp](https://agentprime.io/advisories/CVE-2022-23477.md)
  `CVE-2022-23477` · CVE record: neutrinolabs xrdp · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Integer Overflow in xrdp](https://agentprime.io/advisories/CVE-2022-23484.md)
  `CVE-2022-23484` · CVE record: neutrinolabs xrdp · CVSS 8.2 High · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Out-of-Bound Read in libxrdp](https://agentprime.io/advisories/CVE-2022-23483.md)
  `CVE-2022-23483` · CVE record: neutrinolabs xrdp · CVSS 7.5 High · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Out-of-Bound Read in xrdp](https://agentprime.io/advisories/CVE-2022-23482.md)
  `CVE-2022-23482` · CVE record: neutrinolabs xrdp · CVSS 0.0 None · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Out-of-Bound Read in xrdp](https://agentprime.io/advisories/CVE-2022-23481.md)
  `CVE-2022-23481` · CVE record: neutrinolabs xrdp · CVSS 0.0 None · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Buffer Overflow in xrdp](https://agentprime.io/advisories/CVE-2022-23480.md)
  `CVE-2022-23480` · CVE record: neutrinolabs xrdp · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Buffer Overflow occurs in xrdp](https://agentprime.io/advisories/CVE-2022-23479.md)
  `CVE-2022-23479` · CVE record: neutrinolabs xrdp · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Out of Bound Write in xrdp](https://agentprime.io/advisories/CVE-2022-23478.md)
  `CVE-2022-23478` · CVE record: neutrinolabs xrdp · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Buffer Overflow in xrdp](https://agentprime.io/advisories/CVE-2022-23468.md)
  `CVE-2022-23468` · CVE record: neutrinolabs xrdp · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Out of Bound Read in xrdp](https://agentprime.io/advisories/CVE-2022-23493.md)
  `CVE-2022-23493` · CVE record: neutrinolabs xrdp · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2022 · Tags: Memory corruption
- [Privilege escalation on xrdp](https://agentprime.io/advisories/CVE-2022-23613.md)
  `CVE-2022-23613` · CVE record: neutrinolabs xrdp · CVSS 7.8 High · Not analysed yet · Published 7 Feb 2022 · Tags: Memory corruption
- [Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it](https://agentprime.io/advisories/CVE-2020-4044.md)
  `CVE-2020-4044` · CVE record: neutrinolabs xrdp · CVSS 7.5 High · Not analysed yet · Published 30 Jun 2020 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=neutrinolabs-xrdp>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/neutrinolabs-xrdp/>. Everything for agents: <https://agentprime.io/llms.txt>.