TI-2025-42163 CVE-2025-68670
xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow
Priority MEDIUM 52
xrdp is an open source RDP server.
neutrinolabs
Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9
Exploited now
neutrinolabs records in CISA KEVNo neutrinolabs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
37 records
Priority MEDIUM 51
xrdp is an open source RDP server.
TI-2022-07540 CVE-2022-23480
Buffer Overflow in xrdp
Priority MEDIUM 50
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2022-07539 CVE-2022-23479
Buffer Overflow occurs in xrdp
Priority MEDIUM 50
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2022-07538 CVE-2022-23478
Out of Bound Write in xrdp
Priority MEDIUM 50
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2022-07537 CVE-2022-23477
Buffer Overflow in xrdp
Priority MEDIUM 50
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2022-07528 CVE-2022-23468
Buffer Overflow in xrdp
Priority MEDIUM 50
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2024-26810 CVE-2024-39917
xrdp allows an ininite number of login attempts
Priority MEDIUM 49
xrdp is an open source RDP server.
TI-2022-07544 CVE-2022-23484
Integer Overflow in xrdp
Priority MEDIUM 49
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2022-07552 CVE-2022-23493
Out of Bound Read in xrdp
Priority MEDIUM 47
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2022-07543 CVE-2022-23483
Out-of-Bound Read in libxrdp
Priority MEDIUM 47
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2022-07542 CVE-2022-23482
Out-of-Bound Read in xrdp
Priority MEDIUM 47
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2022-07541 CVE-2022-23481
Out-of-Bound Read in xrdp
Priority MEDIUM 47
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).
TI-2026-30104 CVE-2026-41521
xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass
Priority MEDIUM 46
xrdp is an open source RDP server.
TI-2026-24643 CVE-2026-32105
xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode
Priority MEDIUM 45
xrdp is an open source RDP server.
TI-2013-01249 CVE-2013-1430 · GHSA-26xv-5c8j-w237
Credentials management flaw in xrdp before 0.9.1
Priority MEDIUM 45
An issue was discovered in xrdp before 0.9.1.
Priority MEDIUM 44
xrdp is an open source RDP server.
Priority MEDIUM 42
xrdp is an open source RDP server.
Priority MEDIUM 40
xrdp is an open source RDP server.
TI-2026-27630 CVE-2026-35512
xrdp: Heap buffer overflow in EGFX channel
Priority MEDIUM 40
xrdp is an open source RDP server.
TI-2026-24645 CVE-2026-32107
xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails
Priority LOW 39
xrdp is an open source RDP server.
TI-2020-03533 CVE-2020-4044
Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it
Priority LOW 39
The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload.
TI-2022-07666 CVE-2022-23613
Privilege escalation on xrdp
Priority LOW 37
xrdp is an open source remote desktop protocol (RDP) server.
TI-2017-12463 CVE-2017-16927 · GHSA-26g9-q99r-c973
The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp…
Priority LOW 37
The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to cause a denial of service (buffer overflow an…
Priority LOW 36
xrdp is an open source RDP server.