Package: xrdp (0.9.21.1-1+deb12u2)

Servidor Remote Desktop Protocol (RDP)

Other Packages Related to xrdp:

  • dep: [adduser]

    add and remove users and groups

  • dep: [lsb-base] (>= 3.0-6)

    transitional package for Linux Standard Base init script functionality

  • dep: [ssl-cert]

    simple debconf wrapper for OpenSSL

  • dep: [libc6] (>= 2.34)

    GNU C Library: Shared libraries

  • dep: [libfuse2] (>= 2.6)

    Filesystem in Userspace (library)

  • dep: [libjpeg62-turbo] (>= 1.3.1)

    libjpeg-turbo JPEG runtime library

  • dep: [libopus0] (>= 1.1)

    Opus codec runtime library

  • dep: [libpam0g] (>= 0.99.7.1)

    Pluggable Authentication Modules library

  • dep: [libssl3] (>= 3.0.0)

    kit de ferramentas Secure Sockets Layer - bibliotecas partilhadas

  • dep: [libx11-6]

    Biblioteca do lado do cliente X11

  • dep: [libxfixes3]

    Biblioteca da extensão diversa «fixes» do X11

  • dep: [libxrandr2]

    Biblioteca de extensão RandR do X11

  • rec: [fuse]

    Filesystem in Userspace

  • rec: [xorgxrdp]

    Remote Desktop Protocol (RDP) modules for X.org

  • sug: guacamole

    Package not available

Download xrdp

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64479 KiB3.1 MiBlist of filesDownload
arm64456 KiB3.6 MiBlist of filesDownload

Caminhos de arquivo do pacote (142)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/default/xrdp
  • /etc/init.d/xrdp
  • /etc/logrotate.d/xrdp
  • /etc/pam.d/xrdp-sesman
  • /etc/xrdp/km-00000406.ini
  • /etc/xrdp/km-00000407.ini
  • /etc/xrdp/km-00000409.ini
  • /etc/xrdp/km-0000040a.ini
  • /etc/xrdp/km-0000040b.ini
  • /etc/xrdp/km-0000040c.ini
  • /etc/xrdp/km-00000410.ini
  • /etc/xrdp/km-00000411.ini
  • /etc/xrdp/km-00000412.ini
  • /etc/xrdp/km-00000414.ini
  • /etc/xrdp/km-00000415.ini
  • /etc/xrdp/km-00000416.ini
  • /etc/xrdp/km-00000419.ini
  • /etc/xrdp/km-0000041d.ini
  • /etc/xrdp/km-00000807.ini
  • /etc/xrdp/km-00000809.ini
  • /etc/xrdp/km-0000080a.ini
  • /etc/xrdp/km-0000080c.ini
  • /etc/xrdp/km-00000813.ini
  • /etc/xrdp/km-00000816.ini
  • /etc/xrdp/km-0000100c.ini
  • /etc/xrdp/km-00010409.ini
  • /etc/xrdp/km-19360409.ini
  • /etc/xrdp/pulse/default.pa
  • /etc/xrdp/reconnectwm.sh
  • /etc/xrdp/sesman.ini
  • /etc/xrdp/startwm.sh
  • /etc/xrdp/xrdp.ini
  • /etc/xrdp/xrdp_keyboard.ini
  • /lib/systemd/system/xrdp.service
  • /lib/systemd/system/xrdp-sesman.service
  • /usr/bin/xrdp-dis
  • /usr/bin/xrdp-genkeymap
  • /usr/bin/xrdp-keygen
  • /usr/bin/xrdp-sesadmin
  • /usr/bin/xrdp-sesrun
  • /usr/include/ms-erref.h
  • /usr/include/ms-fscc.h
  • /usr/include/ms-rdpbcgr.h
  • /usr/include/ms-rdpeclip.h
  • /usr/include/ms-rdpedisp.h
  • /usr/include/ms-rdpefs.h
  • /usr/include/ms-rdpegdi.h
  • /usr/include/ms-rdpele.h
  • /usr/include/ms-rdperp.h
  • /usr/include/ms-smb2.h
  • /usr/include/painter.h
  • /usr/include/rfxcodec_common.h
  • /usr/include/rfxcodec_decode.h
  • /usr/include/rfxcodec_encode.h
  • /usr/include/xrdp_client_info.h
  • /usr/include/xrdp_constants.h
  • /usr/include/xrdp_rail.h
  • /usr/include/xrdp_sockets.h
  • /usr/lib/aarch64-linux-gnu/libpainter.a
  • /usr/lib/aarch64-linux-gnu/librfxencode.a
  • /usr/lib/aarch64-linux-gnu/pkgconfig/libpainter.pc
  • /usr/lib/aarch64-linux-gnu/pkgconfig/rfxcodec.pc
  • /usr/lib/aarch64-linux-gnu/pkgconfig/xrdp.pc
  • /usr/lib/aarch64-linux-gnu/xrdp/libcommon.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libcommon.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libcommon.so.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libcommon.so.0.0.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libmc.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libmc.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libscp.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libscp.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libscp.so.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libscp.so.0.0.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libvnc.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libvnc.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdp.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdpapi.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdpapi.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdpapi.so.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdpapi.so.0.0.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdp.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdp.so.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdp.so.0.0.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libxup.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libxup.so
  • /usr/lib/x86_64-linux-gnu/libpainter.a
  • /usr/lib/x86_64-linux-gnu/librfxencode.a
  • /usr/lib/x86_64-linux-gnu/pkgconfig/libpainter.pc
  • /usr/lib/x86_64-linux-gnu/pkgconfig/rfxcodec.pc
  • /usr/lib/x86_64-linux-gnu/pkgconfig/xrdp.pc
  • /usr/lib/x86_64-linux-gnu/xrdp/libcommon.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0.0.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libmc.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libmc.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libscp.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libscp.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0.0.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libvnc.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libvnc.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdp.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdpapi.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdpapi.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdpapi.so.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdpapi.so.0.0.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdp.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdp.so.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdp.so.0.0.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libxup.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libxup.so
  • /usr/sbin/xrdp
  • /usr/sbin/xrdp-chansrv
  • /usr/sbin/xrdp-sesman
  • /usr/share/bug/xrdp/control
  • /usr/share/doc/xrdp/changelog.Debian.gz
  • /usr/share/doc/xrdp/changelog.gz
  • /usr/share/doc/xrdp/copyright
  • /usr/share/doc/xrdp/NEWS.Debian.gz
  • /usr/share/doc/xrdp/README.Debian
  • /usr/share/lintian/overrides/xrdp
  • /usr/share/man/man1/xrdp-dis.1.gz
  • /usr/share/man/man5/sesman.ini.5.gz
  • /usr/share/man/man5/xrdp.ini.5.gz
  • /usr/share/man/man8/xrdp.8.gz
  • /usr/share/man/man8/xrdp-chansrv.8.gz
  • /usr/share/man/man8/xrdp-genkeymap.8.gz
  • /usr/share/man/man8/xrdp-keygen.8.gz
  • /usr/share/man/man8/xrdp-sesadmin.8.gz
  • /usr/share/man/man8/xrdp-sesman.8.gz
  • /usr/share/man/man8/xrdp-sesrun.8.gz
  • /usr/share/polkit-1/rules.d/xrdp-colord.rules
  • /usr/share/xrdp/ad24b.bmp
  • /usr/share/xrdp/ad256.bmp
  • /usr/share/xrdp/cursor0.cur
  • /usr/share/xrdp/cursor1.cur
  • /usr/share/xrdp/sans-10.fv1
  • /usr/share/xrdp/socksetup
  • /usr/share/xrdp/xrdp24b.bmp
  • /usr/share/xrdp/xrdp256.bmp
  • /usr/share/xrdp/xrdp_logo.bmp

Field source: Debian 12 (Bookworm) main amd64

Usar este pacote

O OpenFactory pode iniciar este sistema operacional em uma máquina virtual do navegador, ou começar uma construção que inclui o nome nativo do pacote deste registro.

Versões, suites e repositórios

Cada linha é metadado do índice de pacotes para uma versão, arquitetura, suite e repositório. Nomes, URLs e tamanhos vêm da fonte; um link é um ponto de obtenção mutável, não uma redistribuição da OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.9.21.1-1+deb12u2bookworm / mainamd64Debian 12 · main · amd64479 KiB3.1 MiBpool/main/x/xrdp/xrdp_0.9.21.1-1+deb12u2_amd64.deb
0.9.21.1-1+deb12u2bookworm / mainarm64Debian 12 · main · arm64456 KiB3.6 MiBpool/main/x/xrdp/xrdp_0.9.21.1-1+deb12u2_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilidades conhecidas

A associação de pacotes está em andamento.

CVEGravidadeImpacto por versão
[CVE-2026-55639]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create

Medium(5.3)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-55626]

Published:

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with in

High(8)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.6.1-2

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.6.1-2

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 14

[CVE-2026-55238]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did

Medium(5.3)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-54538]

Published:

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header dur

High(7.5)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-44978]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default conf

Medium(5.3)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-44178]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote clie

High(8.8)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-55645]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parser does not perform s

Medium(6.5)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-42218]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker ca

Medium(5.3)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-41521]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC

High(8.2)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-41252]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during t

Critical(9.8)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-35512]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX (graphics dynamic virtual channel) implementation due to insufficient validation of client-cont

High(8.8)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-33689]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message parsing logic. A remote, unauthenticated attacker can trigger

High(8.7)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-33145]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp

Medium(6.3)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-32624]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domain_user_separator is configured in xrdp

Medium(6.3)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-33516]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The issue occurs when memory is accessed before validat

High(8.2)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-32623]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in the NeutrinoRDP module. When proxying RDP sessions from xrdp to another server, the mod

Critical(9)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-32105]

Published:

xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code (MAC) signature of encrypted RDP packets when using the "Classic

Critical(9.3)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-32107]

Published:

xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege drop process. This improper privilege management co

High(8.8)Desconhecido
Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Desconhecido · Corrigida: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2025-68670]

Published:

xrdp vulnerabilities

Critical(9.1)Desconhecido

A associação de pacotes está em andamento. Observado:

Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Corrigida · Corrigida: 0.9.21.1-1+deb12u2

    usn · xrdp · debian · bookworm; usn · xrdp · debian · 12

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Corrigida · Corrigida: 0.9.21.1-1+deb12u2

    usn · xrdp · debian · bookworm; usn · xrdp · debian · 12

[CVE-2024-39917]

Published:

xrdp vulnerabilities

High(7.3)Desconhecido

A associação de pacotes está em andamento. Observado:

Detalhes (2)
  • 0.9.21.1-1+deb12u2 · amd64 · bookworm

    Corrigida · Corrigida: 0.9.21.1-1+deb12u1

    usn · xrdp · debian · bookworm; usn · xrdp · debian · 12

  • 0.9.21.1-1+deb12u2 · arm64 · bookworm

    Corrigida · Corrigida: 0.9.21.1-1+deb12u1

    usn · xrdp · debian · bookworm; usn · xrdp · debian · 12

[Mais resultados]

Última sincronização:

[Catálogo de CVE]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

0.9.21.1-1+deb12u2 / amd64Observado Sep 1, 2026sha256 f0ad3ec9d515…eea8cfe3Resumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): f0ad3ec9d51549f7e618ee4865e4ac0bdeee2feafb1e59800c5dea66eea8cfe3

Verificar download

printf '%s %s\n' 'f0ad3ec9d51549f7e618ee4865e4ac0bdeee2feafb1e59800c5dea66eea8cfe3' 'xrdp_0.9.21.1-1+deb12u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

0.9.21.1-1+deb12u2 / arm64Observado Sep 1, 2026sha256 63a4f9ea84bb…f97ca853Resumo da fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumo da fonte (sha256): 63a4f9ea84bbc86793144d47479570015af077846f1fc1a1738f0053f97ca853

Verificar download

printf '%s %s\n' '63a4f9ea84bbc86793144d47479570015af077846f1fc1a1738f0053f97ca853' 'xrdp_0.9.21.1-1+deb12u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Fontes

  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6

    Repository-signature verification record
    Signed-object SHA-256
    43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
    Observed SHA-256
    b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5

    Repository-signature verification record
    Signed-object SHA-256
    43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
    Observed SHA-256
    9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Observed SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Evidência de assinatura

    bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Observed SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Result
    match verified