xrdp: lib_palette_update Heap Buffer Overflow & RCE

xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow

xrdp is an open source RDP server

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

An issue was discovered in xrdp before 0.9.1

xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass

xrdp: Pre-authentication out-of-bounds reads in channel parsers

xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow

xrdp: Heap buffer overflow in EGFX channel

xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails

The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to…

xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly

xrdp is an open source remote desktop protocol (RDP) server

The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload

xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode

xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER

xrdp: No authentication required with Xvnc backend on RHEL 9

xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of…

xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)

xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation

xrdp is an open source remote desktop protocol server

xrdp is an open source remote desktop protocol (RDP) server

xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman

xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)

xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads

xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification

XRDP is vulnerable to a server timing attack, leading to user enumeration