Skip to content
OpenAdvisories
Critical DLA-4464-1 1 CVE

xrdp - security update

Published Feb 3, 2026 · Updated Feb 3, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 xrdp 0.9.21.1-1~deb11u3

Vulnerabilities 1

  • Critical 9.1
    CVE-2025-68670

    xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow

    xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, t…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine