Known vulnerabilities in xrdp (Debian package)
Vendor:
Debian
Software:
xrdp (Debian package)
Software CPE:
cpe:2.3:o:debian:xrdp_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
29
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
0.10.1-3.1+deb13u2
0.10.1-3.1+deb13u1
0.9.21.1-1+deb12u2
0.9.21.1-1~deb11u1
0.9.12-1.1
0.9.9-1+deb10u1
0.5.0~20100303cvs-4+b100
0.5.0~20100303cvs-4+b101
0.5.0~20100303cvs-6+b1
0.5.0-2+b1
0.6.1-2+b1
0.6.1-2+b2
0.9.1~20161119+gite8308d5-1+b1
0.9.1~20161126+git589b29f-2+b1
0.9.6-1+b1
0.9.9-1+b1
0.9.12
0.9.9
0.9.8
0.9.1
0.6.1
0.9.12-1
0.9.9-1
0.9.8-1
0.9.8-2~bpo9+1
0.9.8-2
0.5.0-2+deb7u1
0.5.0-2+deb7u2
0.5.0-2+deb7u3
0.9.0~20160601+git703fedd-3~bpo8+1
0.9.1-9+deb9u3
0.9.6-1~bpo9+1
0.9.6-1
0.9.5-2
0.9.5-1
0.9.4-5
0.9.4-4
0.9.4-3
0.9.4-2
0.9.4-1~bpo9+1
0.9.4-1
0.9.1-9+deb9u2
0.9.1-9+deb9u1
0.9.1-9~bpo8+1
0.9.1-8
0.9.1-9
0.9.1-4~bpo8+1
0.4.0~dfsg-1
0.4.0~dfsg-2
0.4.0~dfsg-3
0.4.0~dfsg-4
0.4.0~dfsg-5
0.4.0~dfsg-6
0.4.0~dfsg-7
0.4.0~dfsg-8
0.4.0~dfsg-9
0.4.1~dfsg-1
0.4.1~dfsg-2
0.5.0~20100303cvs-1
0.5.0~20100303cvs-2
0.5.0~20100303cvs-3
0.5.0~20100303cvs-4
0.5.0~20100303cvs-5
0.5.0~20100303cvs-6
0.5.0-1
0.5.0-2
0.6.0-1
0.6.1-1
0.6.1-2
0.9.0~20160601+git703fedd-1
0.9.0~20160601+git703fedd-2
0.9.0~20160601+git703fedd-3
0.9.0~20161006+git132cc10-1
0.9.0~20161027+gitc524b06-1
0.9.1~20161119+gite8308d5-1
0.9.1~20161126+git589b29f-1
0.9.1~20161126+git589b29f-2
0.9.1~2016121126+git5171fa7-1
0.9.1-1
0.9.1-2
0.9.1-3
0.9.1-4
0.9.1-5~exp1
0.9.1-5~exp2
0.9.1-5
0.9.1-6
0.9.1-7
0.9.2~20170325-1~exp1
Vulnerabilities (29)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU136789 - Heap-based Buffer Overflow CVE-2026-41252 |
CWE-122 | High | 0.10.1-3.1+deb13u2 | 02.07.2026 |
SB2026061550 SB2026070758 SB2026070759 and 3 more |
||
| #VU136788 - Integer overflow CVE-2026-41521 |
CWE-190 | High | 0.10.1-3.1+deb13u2 | 02.07.2026 |
SB2026061550 SB2026070758 SB2026070759 and 3 more |
||
| #VU136786 - Heap-based Buffer Overflow CVE-2026-44178 |
CWE-122 | Medium | 0.10.1-3.1+deb13u2 | 02.07.2026 |
SB2026061550 SB2026070758 SB2026070759 and 3 more |
||
| #VU136785 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-54538 |
CWE-835 | Medium | 0.10.1-3.1+deb13u2 | 02.07.2026 |
SB2026061550 SB2026070758 SB2026070759 and 4 more |
||
| #VU136784 - Out-of-bounds read CVE-2026-55645 |
CWE-125 | Medium | 0.10.1-3.1+deb13u2 | 02.07.2026 |
SB2026061550 SB2026070758 SB2026070759 and 3 more |
||
| #VU136783 - Out-of-bounds read CVE-2026-55639 |
CWE-125 | Medium | 0.10.1-3.1+deb13u2 | 02.07.2026 |
SB2026061550 SB2026070758 SB2026070759 and 3 more |
||
| #VU136617 - Out-of-bounds read CVE-2026-44978 |
CWE-125 | Medium | 0.10.1-3.1+deb13u2 | 01.07.2026 |
SB2026061550 SB2026070758 SB2026070759 and 3 more |
||
| #VU136615 - Buffer over-read CVE-2026-55238 |
CWE-126 | Medium | 0.10.1-3.1+deb13u2 | 01.07.2026 |
SB2026061550 SB2026070758 SB2026070759 and 3 more |
||
| #VU134543 - Observable Response Discrepancy CVE-2026-42218 |
CWE-204 | Medium | 0.10.1-3.1+deb13u2 | 15.06.2026 |
SB2026061550 SB2026070758 SB2026070759 and 3 more |
||
| #VU126465 - Heap-based Buffer Overflow CVE-2026-32624 |
CWE-122 | Medium | 0.10.1-3.1+deb13u2 | 17.04.2026 |
SB20260417101 SB2026041802 SB2026041803 and 4 more |
||
| #VU126464 - Improper Validation of Integrity Check Value CVE-2026-32105 |
CWE-354 | High | 0.10.1-3.1+deb13u2 | 17.04.2026 |
SB20260417101 SB2026041802 SB2026041803 and 5 more |
||
| #VU126463 - Improper Check for Dropped Privileges CVE-2026-32107 |
CWE-273 | Low | 0.10.1-3.1+deb13u2 | 17.04.2026 |
SB20260417101 SB2026041802 SB2026041803 and 5 more |
||
| #VU126462 - Out-of-bounds read CVE-2026-33516 |
CWE-125 | High | 0.10.1-3.1+deb13u2 | 17.04.2026 |
SB20260417101 SB2026041802 SB2026041803 and 4 more |
||
| #VU126461 - Heap-based Buffer Overflow CVE-2026-32623 |
CWE-122 | High | 0.10.1-3.1+deb13u2 | 17.04.2026 |
SB20260417101 SB2026041802 SB2026041803 and 4 more |
||
| #VU126460 - Command injection CVE-2026-33145 |
CWE-77 | Low | 0.10.1-3.1+deb13u2 | 17.04.2026 |
SB20260417101 SB2026041802 SB2026041803 and 4 more |
||
| #VU126459 - Out-of-bounds read CVE-2026-33689 |
CWE-125 | High | 0.10.1-3.1+deb13u2 | 17.04.2026 |
SB20260417101 SB2026041802 SB2026041803 and 4 more |
||
| #VU126458 - Heap-based Buffer Overflow CVE-2026-35512 |
CWE-122 | Medium | 0.10.1-3.1+deb13u2 | 17.04.2026 |
SB20260417101 SB2026041802 SB2026041803 and 4 more |
||
| #VU122100 - Stack-based buffer overflow CVE-2025-68670 |
CWE-121 | High | 0.9.21.1-1+deb12u2, 0.10.1-3.1+deb13u1 | 28.01.2026 |
SB2026012846 SB2026012847 SB2026012848 and 8 more |
||
| #VU70104 - Integer overflow CVE-2022-23484 |
CWE-190 | High | 0.9.21.1-1~deb11u1 | 12.12.2022 |
SB2022121204 SB2023010229 SB2023010519 and 11 more |
||
| #VU70101 - Out-of-bounds read CVE-2022-23493 |
CWE-125 | High | 0.9.21.1-1~deb11u1 | 12.12.2022 |
SB2022121204 SB2023010519 SB2023021031 and 8 more |
Showing elements 1 - 20 out of 29