Skip to content
OpenAdvisories
Critical DLA-3370-1 6 CVEs

xrdp - security update

Published Mar 28, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 xrdp 0.9.9-1+deb10u2

Vulnerabilities 6

  • Critical 9.1

    Out of Bound Write in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Write in xrdp_mm_trans_process_drdynvc_channel_open() function. There are no known workarou…

  • Critical 9.1

    Buffer Overflow occurs in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_mm_chan_data_in() function. There are no known workarounds for this issue. User…

  • Critical 9.1

    Out of Bound Read in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close() function. There are no known workarou…

  • High 8.2

    Integer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Integer Overflow in xrdp_mm_process_rail_update_window_text() function. There are no known workarounds f…

  • High 7.5

    Out-of-Bound Read in libxrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a Out of Bound Read in libxrdp_send_to_channel() function. There are no known workarounds for this issue. …

  • Medium 6.5

    Buffer Overflow in xrdp

    xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 contain a buffer over flow in xrdp_login_wnd_create() function. There are no known workarounds for this issue. Use…