Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 12 | xrdp | 0.9.21.1-1+deb12u2 |
| Debian · 13 | xrdp | 0.10.1-3.1+deb13u1 |
Vulnerabilities 1
-
Critical 9.1
xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow
xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, t…