CVE-2026-33689— xrdp: Pre-authentication out-of-bounds reads in channel parsers
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-33689
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
xrdp: Pre-authentication out-of-bounds reads in channel parsers
Source: NVD (National Vulnerability Database)
Vulnerability Description
xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message parsing logic. A remote, unauthenticated attacker can trigger this flaw by sending a specially crafted sequence of packets during the initial connection phase. This vulnerability results from insufficient validation of input buffer lengths before processing dynamic channel communication. Successful exploitation can lead to a denial-of-service (DoS) condition via a process crash or potential disclosure of sensitive information from the service's memory space. This issue has been fixed in version 0.10.6.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Vulnerability Title
xrdp 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
xrdp是neutrinolabs开源的一款开源远程桌面协议服务器。 xrdp 0.10.5及之前版本存在安全漏洞，该漏洞源于身份验证前的RDP消息解析逻辑存在越界读取，可能导致拒绝服务或泄露服务内存空间中的敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| neutrinolabs | xrdp | < 0.10.6 | - |
II. Public POCs for CVE-2026-33689
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-33689
请登录查看更多情报信息。
- Release xrdp v0.10.6 · neutrinolabs/xrdp · GitHubx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2026-33689
Same Patch Batch · neutrinolabs · 2026-04-17 · 8 CVEs total
| CVE-2026-32107 | 8.8 HIGH | xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid |
| CVE-2026-33145 | 6.3 MEDIUM | xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman |
| CVE-2026-35512 | xrdp: Heap buffer overflow in EGFX channel | |
| CVE-2026-32105 | xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in no | |
| CVE-2026-32624 | xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length | |
| CVE-2026-32623 | xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly | |
| CVE-2026-33516 | xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers |
IV. Related Vulnerabilities
Same product: xrdp
- CVE-2026-35512
xrdp: Heap buffer overflow in EGFX channel - CVE-2026-33145
xrdp: Authenticated RCE via unsanitized AlternateShell execu - CVE-2026-32624
xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() - CVE-2026-33516
xrdp: Pre-authentication out-of-bounds reads in RDP capabili - CVE-2026-32623
xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly
Same vendor: neutrinolabs
- CVE-2026-35512
xrdp: Heap buffer overflow in EGFX channel - CVE-2026-33145
xrdp: Authenticated RCE via unsanitized AlternateShell execu - CVE-2026-32624
xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() - CVE-2026-33516
xrdp: Pre-authentication out-of-bounds reads in RDP capabili - CVE-2026-32623
xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly
Same weakness: CWE-125
- CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bou - CVE-2026-6104
Global buffer over-read in mb_convert_encoding() with attack - CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-3508
ASUS System Control Interface 缓冲区错误漏洞
V. Comments for CVE-2026-33689
No comments yet