CVE-2026-55238— neutrinolabs xrdp 缓冲区错误漏洞

xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validation for specific capability sets. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted RDP packet containing malformed capability data. Due to missing bounds checks, the xrdp process may perform out-of-bounds memory reads, which can result in the termination of the service (Denial of Service). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service. This issue has been fixed in version 0.10.6.1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

缓冲区上溢读取

neutrinolabs xrdp 缓冲区错误漏洞

neutrinolabs xrdp是neutrinolabs团队开源的一款开源远程桌面协议服务器。 neutrinolabs xrdp 0.10.6及之前版本存在缓冲区错误漏洞，该漏洞源于在RDP Confirm Active PDU处理期间缺乏边界检查，可能导致越界内存读取，从而造成服务终止（拒绝服务）。

N/A

N/A