Known vulnerabilities in xrdp (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:xrdp_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xrdp (Ubuntu package) xrdp (Ubuntu package) is affected by 18 known vulnerabilities: 8 high, 7 medium, 3 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122100 - Stack-based buffer overflow
CVE-2025-68670
CWE-121 High
No
No
0.9.5-2ubuntu0.1~esm3, 0.9.12-1ubuntu0.1+esm2, 0.9.17-2ubuntu3+esm2, 0.9.24-4ubuntu0.1~esm1, 0.10.1-3.1+deb13u1build0.25.10.1 28.01.2026 SB2026012846
SB2026012847
SB2026012848
and 8 more
#VU94665 - Improper Restriction of Excessive Authentication Attempts
CVE-2024-39917
CWE-307 Medium
No
No
0.9.5-2ubuntu0.1~esm3, 0.9.12-1ubuntu0.1+esm2, 0.9.17-2ubuntu3+esm2, 0.9.24-4ubuntu0.1~esm1, 0.10.1-3.1+deb13u1build0.25.10.1 23.07.2024 SB2024072324
SB2025020369
SB2025020370
and 2 more
#VU81308 - Out-of-bounds read
CVE-2023-42822
CWE-125 Medium
No
No
Ubuntu Pro, 0.9.5-2ubuntu0.1~esm3, 0.9.12-1ubuntu0.1+esm2, 0.9.17-2ubuntu3+esm2, 0.9.24-4ubuntu0.1~esm1, 0.10.1-3.1+deb13u1build0.25.10.1 02.10.2023 SB2023100211
SB2023100212
SB2023100213
and 9 more
#VU80197 - Security Features
CVE-2023-40184
CWE-254 Low
No
No
Ubuntu Pro, 0.9.5-2ubuntu0.1~esm3, 0.9.12-1ubuntu0.1+esm2, 0.9.17-2ubuntu3+esm2, 0.9.24-4ubuntu0.1~esm1, 0.10.1-3.1+deb13u1build0.25.10.1 31.08.2023 SB2023083127
SB2023090118
SB2023090119
and 10 more
#VU70108 - Memory corruption
CVE-2022-23468
CWE-119 Medium
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010229
SB2023010519
and 11 more
#VU70107 - Memory corruption
CVE-2022-23477
CWE-119 High
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023012639
SB2023091901
and 7 more
#VU70106 - Memory corruption
CVE-2022-23480
CWE-119 High
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010229
SB2023010519
and 11 more
#VU70105 - Memory corruption
CVE-2022-23479
CWE-119 High
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010229
SB2023010519
and 11 more
#VU70104 - Integer overflow
CVE-2022-23484
CWE-190 High
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010229
SB2023010519
and 11 more
#VU70103 - Out-of-bounds read
CVE-2022-23483
CWE-125 Medium
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010229
SB2023010519
and 11 more
#VU70102 - Out-of-bounds read
CVE-2022-23481
CWE-125 Medium
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010229
SB2023010519
and 11 more
#VU70101 - Out-of-bounds read
CVE-2022-23493
CWE-125 High
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010519
SB2023021031
and 8 more
#VU70100 - Out-of-bounds read
CVE-2022-23482
CWE-125 Medium
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010229
SB2023010519
and 11 more
#VU70099 - Out-of-bounds write
CVE-2022-23478
CWE-787 High
No
No
Ubuntu Pro 12.12.2022 SB2022121204
SB2023010519
SB2023021031
and 8 more
#VU60614 - Integer underflow
CVE-2022-23613
CWE-191 Low
No
No
Ubuntu Pro 15.02.2022 SB2022021507
SB2023110902
SB2022020865
and 4 more
#VU31719 - Stack-based buffer overflow
CVE-2020-4044
CWE-121 Low
No
No
Ubuntu Pro, 0.9.12-1ubuntu0.1 21.07.2020 SB2020063028
SB2020072112
SB2020081422
and 2 more
#VU37877 - Memory corruption
CVE-2017-16927
CWE-119 High
No
No
0.6.0-1ubuntu0.1+esm1, 0.6.1-2ubuntu0.3+esm1 23.11.2017 SB2017112318
SB2017112410
SB2017112411
and 6 more
#VU39449 - Improper Authentication
CVE-2017-6967
CWE-287 Medium
No
No
0.6.0-1ubuntu0.1+esm1, 0.6.1-2ubuntu0.3+esm1 17.03.2017 SB2017031705
SB2017033019
SB2017033020
and 3 more