https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:10:12 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-44978 <p>xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to security_layer=negotiate or security_layer=rdp, and the crypto level is changed to crypt_level=fips in xrdp.ini. In this specific non-default mode, the server fails to validate the FIPS padding length field, leading to a pointer underflow and a subsequent negative length calculation. An unauthenticated remote attacker can exploit this by sending a crafted FIPS-protected PDU, causing a heap out-of-bounds read that results in a process crash and denial of service (DoS). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service. This issue has been fixed in version 0.10.6.1.</p> <p>xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to security_layer=negotiate or security_layer=rdp, and the crypto level is changed to crypt_level=fips in xrdp.ini. In this specific non-default mode, the server fails to validate the FIPS padding length field, leading to a pointer underflow and a subsequent negative length calculation. An unauthenticated remote attacker can exploit this by sending a crafted FIPS-protected PDU, causing a heap out-of-bounds read that results in a process crash and denial of service (DoS). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service. This issue has been fixed in version 0.10.6.1.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-44978 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11543-1 <p>xrdp-0.10.6.1-1.1 on GA media</p> <p>xrdp-0.10.6.1-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11543-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-44978 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xrdp, Ubuntu:Pro:16.04:LTS: xrdp, Ubuntu:Pro:18.04:LTS: xrdp, Ubuntu:Pro:20.04:LTS: xrdp, Ubuntu:Pro:22.04:LTS: xrdp, Ubuntu:Pro:24.04:LTS: xrdp, Ubuntu:25.10: xrdp, Ubuntu:26.04:LTS: xrdp</p> <p>xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to security_layer=negotiate or security_layer=rdp, and the crypto level is changed to crypt_level=fips in xrdp.ini. In this specific non-default mode, the server fails to validate the FIPS padding length field, leading to a pointer underflow and a subsequent negative length calculation. An unauthenticated remote attacker can exploit this by sending a crafted FIPS-protected PDU, causing a heap out-of-bounds read that results in a process crash and denial of service (DoS). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service. This issue has been fixed in version 0.10.6.1.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xrdp, Ubuntu:Pro:16.04:LTS: xrdp, Ubuntu:Pro:18.04:LTS: xrdp, Ubuntu:Pro:20.04:LTS: xrdp, Ubuntu:Pro:22.04:LTS: xrdp, Ubuntu:Pro:24.04:LTS: xrdp, Ubuntu:25.10: xrdp, Ubuntu:26.04:LTS: xrdp</p> <p>xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to security_layer=negotiate or security_layer=rdp, and the crypto level is changed to crypt_level=fips in xrdp.ini. In this specific non-default mode, the server fails to validate the FIPS padding length field, leading to a pointer underflow and a subsequent negative length calculation. An unauthenticated remote attacker can exploit this by sending a crafted FIPS-protected PDU, causing a heap out-of-bounds read that results in a process crash and denial of service (DoS). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service. This issue has been fixed in version 0.10.6.1.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-44978