rpm package
suse/xrdp&distro=SUSE Linux Enterprise Server 15 SP4-LTSS
pkg:rpm/suse/xrdp&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-68670 | Cri | 9.1 | < 0.9.13.1-150200.4.36.1 | 0.9.13.1-150200.4.36.1 | Jan 27, 2026 | xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, the vulnerability coul | |
| CVE-2024-39917 | Hig | 7.2 | < 0.9.13.1-150200.4.33.1 | 0.9.13.1-150200.4.33.1 | Jul 12, 2024 | xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman. |
- affected < 0.9.13.1-150200.4.36.1fixed 0.9.13.1-150200.4.36.1
xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, the vulnerability coul
- affected < 0.9.13.1-150200.4.33.1fixed 0.9.13.1-150200.4.33.1
xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman.