NE
Vendor
neutrinolabs
37
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55639 | XR xrdp neutrinolabs | 5.3 | Jul 20 | xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY) |
| CVE-2026-55626 | XR xrdp neutrinolabs | 7.3 | Jul 20 | xrdp: No authentication required with Xvnc backend on RHEL 9 |
| CVE-2026-55238 | XR xrdp neutrinolabs | 5.3 | Jul 20 | xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads |
| CVE-2026-54538 | XR xrdp neutrinolabs | 7.5 | Jul 20 | xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER |
| CVE-2026-44978 | XR xrdp neutrinolabs | 5.3 | Jul 20 | xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification |
| CVE-2026-44178 | XR xrdp neutrinolabs | 8.8 | Jul 20 | xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow |
| CVE-2026-55645 | XR xrdp neutrinolabs | 6.5 | Jul 20 | xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control) |
| CVE-2026-42218 | XR xrdp neutrinolabs | 5.3 | Jul 20 | XRDP is vulnerable to a server timing attack, leading to user enumeration |
| CVE-2026-41521 | XR xrdp neutrinolabs | 9.1 | Jul 20 | xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass |
| CVE-2026-41252 | XR xrdp neutrinolabs | 9.8 | Jul 20 | xrdp: lib_palette_update Heap Buffer Overflow & RCE |
| CVE-2026-35512 | XR xrdp neutrinolabs | 8.8 | Apr 17 | xrdp: Heap buffer overflow in EGFX channel |
| CVE-2026-33689 | XR xrdp neutrinolabs | 9.1 | Apr 17 | xrdp: Pre-authentication out-of-bounds reads in channel parsers |
| CVE-2026-33145 | XR xrdp neutrinolabs | 6.3 | Apr 17 | xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman |
| CVE-2026-32624 | XR xrdp neutrinolabs | 6.5 | Apr 17 | xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation |
| CVE-2026-33516 | XR xrdp neutrinolabs | 9.1 | Apr 17 | xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers |
| CVE-2026-32623 | XR xrdp neutrinolabs | 8.1 | Apr 17 | xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly |
| CVE-2026-32105 | XR xrdp neutrinolabs | 7.7 | Apr 17 | xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode |
| CVE-2026-32107 | XR xrdp neutrinolabs | 8.8 | Apr 17 | xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails |
| CVE-2025-68670 | XR xrdp neutrinolabs | 9.8 | Jan 27 | xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow |
| CVE-2024-39917 | XR xrdp neutrinolabs | 9.8 | Jul 12 | xrdp allows an ininite number of login attempts |
| CVE-2023-42822 | XR Xrdp Neutrinolabs | 6.5 | Sep 27 | xrdp is an open source remote desktop protocol server |
| CVE-2023-40184 | XR Xrdp Neutrinolabs | 6.5 | Aug 30 | xrdp is an open source remote desktop protocol (RDP) server |
| CVE-2022-23493 | XR Xrdp Neutrinolabs | 9.1 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23484 | XR Xrdp Neutrinolabs | 9.8 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23483 | XR Xrdp Neutrinolabs | 9.1 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23482 | XR Xrdp Neutrinolabs | 9.1 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23481 | XR Xrdp Neutrinolabs | 9.1 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23480 | XR Xrdp Neutrinolabs | 9.8 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23479 | XR Xrdp Neutrinolabs | 9.8 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23478 | XR Xrdp Neutrinolabs | 9.8 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23477 | XR Xrdp Neutrinolabs | 9.8 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23468 | XR Xrdp Neutrinolabs | 9.8 | Dec 9 | xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP) |
| CVE-2022-23613 | XR Xrdp Neutrinolabs | 7.8 | Feb 7 | xrdp is an open source remote desktop protocol (RDP) server |
| CVE-2020-4044 | XR Xrdp Neutrinolabs | 7.8 | Jun 30 | The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload |
| CVE-2017-16927 | XR Xrdp Neutrinolabs | 8.4 | Nov 23 | The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write length, which allows local users to… |
| CVE-2017-6967 | XR Xrdp Neutrinolabs | 7.3 | Mar 17 | xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of… |
| CVE-2013-1430 | XR Xrdp Neutrinolabs | 9.8 | Dec 16 | An issue was discovered in xrdp before 0.9.1 |