rpm package
suse/xrdp&distro=SUSE Linux Enterprise Server 15 SP5-LTSS
pkg:rpm/suse/xrdp&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-68670 | — | < 0.9.13.1-150200.4.36.1 | 0.9.13.1-150200.4.36.1 | Jan 27, 2026 | xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, the vulnerability coul | ||
| CVE-2024-39917 | — | < 0.9.13.1-150200.4.33.1 | 0.9.13.1-150200.4.33.1 | Jul 12, 2024 | xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman. |
- CVE-2025-68670Jan 27, 2026affected < 0.9.13.1-150200.4.36.1fixed 0.9.13.1-150200.4.36.1
xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, the vulnerability coul
- CVE-2024-39917Jul 12, 2024affected < 0.9.13.1-150200.4.33.1fixed 0.9.13.1-150200.4.33.1
xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman.