Advisories · Technology
neutrinolabs xrdp.
Every CVE that names neutrinolabs xrdp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)
- neutrinolabs xrdp
- Memory corruption
- CVSS 8.0 High
xrdp: No authentication required with Xvnc backend on RHEL 9
- neutrinolabs xrdp
- Authentication bypass
- CVSS 5.3 Medium
xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads
- neutrinolabs xrdp
- CWE-126
- CVSS 7.5 High
xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER
- neutrinolabs xrdp
- Denial of service
- CVSS 5.3 Medium
xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification
- neutrinolabs xrdp
- Memory corruption
- CWE-20
- CVSS 8.8 High
xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow
- neutrinolabs xrdp
- Memory corruption
- CVSS 6.5 Medium
xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)
- neutrinolabs xrdp
- Memory corruption
- CVSS 5.3 Medium
XRDP is vulnerable to a server timing attack, leading to user enumeration
- neutrinolabs xrdp
- CWE-204
- CVSS 8.2 High
xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass
- neutrinolabs xrdp
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
xrdp: lib_palette_update Heap Buffer Overflow & RCE
- neutrinolabs xrdp
- Memory corruption
- CVSS 8.7 High
xrdp: Heap buffer overflow in EGFX channel
- neutrinolabs xrdp
- Memory corruption
- CVSS 8.7 High
xrdp: Pre-authentication out-of-bounds reads in channel parsers
- neutrinolabs xrdp
- Memory corruption
- CVSS 6.3 Medium
xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman
- neutrinolabs xrdp
- Command injection
- CVSS 6.3 Medium
xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation
- neutrinolabs xrdp
- Memory corruption
- CVSS 7.7 High
xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers
- neutrinolabs xrdp
- Memory corruption
- CVSS 7.7 High
xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly
- neutrinolabs xrdp
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode
- neutrinolabs xrdp
- CWE-354
- CVSS 8.8 High
xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails
- neutrinolabs xrdp
- CWE-273
- CVSS 9.1 CriticalCritical · CVSS 9+
xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow
- neutrinolabs xrdp
- Memory corruption
- CVSS 7.2 High
xrdp allows an ininite number of login attempts
- neutrinolabs xrdp
- Authentication bypass
- CVSS 4.6 Medium
Unchecked access to font glyph info in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 2.6 Low
Improper handling of session establishment errors in xrdp
- neutrinolabs xrdp
- CWE-755
- CVSS 9.1 CriticalCritical · CVSS 9+
Buffer Overflow in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 8.2 High
Integer Overflow in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 7.5 High
Out-of-Bound Read in libxrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 0.0 None
Out-of-Bound Read in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 0.0 None
Out-of-Bound Read in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Buffer Overflow in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Buffer Overflow occurs in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Out of Bound Write in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 6.5 Medium
Buffer Overflow in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Out of Bound Read in xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 7.8 High
Privilege escalation on xrdp
- neutrinolabs xrdp
- Memory corruption
- CVSS 7.5 High
Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it
- neutrinolabs xrdp
- Memory corruption