Package: xrdp (0.9.24-5~bpo12+1)

Сервер Remote Desktop Protocol (RDP)

Other Packages Related to xrdp:

  • dep: [adduser]

    add and remove users and groups

  • dep: sysvinit-utils (>= 3.06-4)

    Package not available

  • dep: [ssl-cert]

    simple debconf wrapper for OpenSSL

  • dep: [libc6] (>= 2.34)

    GNU C Library: Shared libraries

  • dep: [libfuse2] (>= 2.6)

    Filesystem in Userspace (library)

  • dep: [libjpeg62-turbo] (>= 1.3.1)

    libjpeg-turbo JPEG runtime library

  • dep: [libopus0] (>= 1.1)

    Opus codec runtime library

  • dep: [libpam0g] (>= 0.99.7.1)

    Pluggable Authentication Modules library

  • dep: [libssl3] (>= 3.0.0)

    набір інструментів Secure Sockets Layer — спільні бібліотеки

  • dep: [libx11-6]

    Клієнтська бібліотека X11

  • dep: [libxfixes3]

    Бібліотека різноманітного розширення «fixes» X11

  • dep: [libxrandr2]

    Бібліотека розширення X11 RandR

  • rec: [fuse]

    Filesystem in Userspace

  • rec: pipewire-module-xrdp

    Package not available

  • rec: [xorgxrdp]

    Remote Desktop Protocol (RDP) modules for X.org

  • sug: guacamole

    Package not available

Download xrdp

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64482 KiB3.1 MiBlist of filesDownload
arm64457 KiB3.6 MiBlist of filesDownload

Шляхи файлів пакета (142)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/default/xrdp
  • /etc/init.d/xrdp
  • /etc/logrotate.d/xrdp
  • /etc/pam.d/xrdp-sesman
  • /etc/xrdp/km-00000406.ini
  • /etc/xrdp/km-00000407.ini
  • /etc/xrdp/km-00000409.ini
  • /etc/xrdp/km-0000040a.ini
  • /etc/xrdp/km-0000040b.ini
  • /etc/xrdp/km-0000040c.ini
  • /etc/xrdp/km-00000410.ini
  • /etc/xrdp/km-00000411.ini
  • /etc/xrdp/km-00000412.ini
  • /etc/xrdp/km-00000414.ini
  • /etc/xrdp/km-00000415.ini
  • /etc/xrdp/km-00000416.ini
  • /etc/xrdp/km-00000419.ini
  • /etc/xrdp/km-0000041d.ini
  • /etc/xrdp/km-00000807.ini
  • /etc/xrdp/km-00000809.ini
  • /etc/xrdp/km-0000080a.ini
  • /etc/xrdp/km-0000080c.ini
  • /etc/xrdp/km-00000813.ini
  • /etc/xrdp/km-00000816.ini
  • /etc/xrdp/km-0000100c.ini
  • /etc/xrdp/km-00010409.ini
  • /etc/xrdp/km-19360409.ini
  • /etc/xrdp/pulse/default.pa
  • /etc/xrdp/reconnectwm.sh
  • /etc/xrdp/sesman.ini
  • /etc/xrdp/startwm.sh
  • /etc/xrdp/xrdp.ini
  • /etc/xrdp/xrdp_keyboard.ini
  • /lib/systemd/system/xrdp.service
  • /lib/systemd/system/xrdp-sesman.service
  • /usr/bin/xrdp-dis
  • /usr/bin/xrdp-genkeymap
  • /usr/bin/xrdp-keygen
  • /usr/bin/xrdp-sesadmin
  • /usr/bin/xrdp-sesrun
  • /usr/include/ms-erref.h
  • /usr/include/ms-fscc.h
  • /usr/include/ms-rdpbcgr.h
  • /usr/include/ms-rdpeclip.h
  • /usr/include/ms-rdpedisp.h
  • /usr/include/ms-rdpefs.h
  • /usr/include/ms-rdpegdi.h
  • /usr/include/ms-rdpele.h
  • /usr/include/ms-rdperp.h
  • /usr/include/ms-smb2.h
  • /usr/include/painter.h
  • /usr/include/rfxcodec_common.h
  • /usr/include/rfxcodec_decode.h
  • /usr/include/rfxcodec_encode.h
  • /usr/include/xrdp_client_info.h
  • /usr/include/xrdp_constants.h
  • /usr/include/xrdp_rail.h
  • /usr/include/xrdp_sockets.h
  • /usr/lib/aarch64-linux-gnu/libpainter.a
  • /usr/lib/aarch64-linux-gnu/librfxencode.a
  • /usr/lib/aarch64-linux-gnu/pkgconfig/libpainter.pc
  • /usr/lib/aarch64-linux-gnu/pkgconfig/rfxcodec.pc
  • /usr/lib/aarch64-linux-gnu/pkgconfig/xrdp.pc
  • /usr/lib/aarch64-linux-gnu/xrdp/libcommon.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libcommon.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libcommon.so.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libcommon.so.0.0.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libmc.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libmc.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libscp.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libscp.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libscp.so.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libscp.so.0.0.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libvnc.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libvnc.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdp.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdpapi.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdpapi.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdpapi.so.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdpapi.so.0.0.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdp.so
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdp.so.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libxrdp.so.0.0.0
  • /usr/lib/aarch64-linux-gnu/xrdp/libxup.a
  • /usr/lib/aarch64-linux-gnu/xrdp/libxup.so
  • /usr/lib/x86_64-linux-gnu/libpainter.a
  • /usr/lib/x86_64-linux-gnu/librfxencode.a
  • /usr/lib/x86_64-linux-gnu/pkgconfig/libpainter.pc
  • /usr/lib/x86_64-linux-gnu/pkgconfig/rfxcodec.pc
  • /usr/lib/x86_64-linux-gnu/pkgconfig/xrdp.pc
  • /usr/lib/x86_64-linux-gnu/xrdp/libcommon.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0.0.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libmc.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libmc.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libscp.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libscp.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0.0.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libvnc.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libvnc.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdp.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdpapi.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdpapi.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdpapi.so.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdpapi.so.0.0.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdp.so
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdp.so.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libxrdp.so.0.0.0
  • /usr/lib/x86_64-linux-gnu/xrdp/libxup.a
  • /usr/lib/x86_64-linux-gnu/xrdp/libxup.so
  • /usr/sbin/xrdp
  • /usr/sbin/xrdp-chansrv
  • /usr/sbin/xrdp-sesman
  • /usr/share/bug/xrdp/control
  • /usr/share/doc/xrdp/changelog.Debian.gz
  • /usr/share/doc/xrdp/changelog.gz
  • /usr/share/doc/xrdp/copyright
  • /usr/share/doc/xrdp/NEWS.Debian.gz
  • /usr/share/doc/xrdp/README.Debian
  • /usr/share/lintian/overrides/xrdp
  • /usr/share/man/man1/xrdp-dis.1.gz
  • /usr/share/man/man5/sesman.ini.5.gz
  • /usr/share/man/man5/xrdp.ini.5.gz
  • /usr/share/man/man8/xrdp.8.gz
  • /usr/share/man/man8/xrdp-chansrv.8.gz
  • /usr/share/man/man8/xrdp-genkeymap.8.gz
  • /usr/share/man/man8/xrdp-keygen.8.gz
  • /usr/share/man/man8/xrdp-sesadmin.8.gz
  • /usr/share/man/man8/xrdp-sesman.8.gz
  • /usr/share/man/man8/xrdp-sesrun.8.gz
  • /usr/share/polkit-1/rules.d/xrdp-colord.rules
  • /usr/share/xrdp/ad24b.bmp
  • /usr/share/xrdp/ad256.bmp
  • /usr/share/xrdp/cursor0.cur
  • /usr/share/xrdp/cursor1.cur
  • /usr/share/xrdp/sans-10.fv1
  • /usr/share/xrdp/socksetup
  • /usr/share/xrdp/xrdp24b.bmp
  • /usr/share/xrdp/xrdp256.bmp
  • /usr/share/xrdp/xrdp_logo.bmp

Field source: Debian 12 (Bookworm) backports main amd64

Використати цей пакет

OpenFactory може завантажити цю операційну систему у віртуальній машині браузера або почати збірку образу з рідною назвою пакета з цього запису.

Версії, набори та репозиторії

Кожен рядок: метадані індексу пакетів для однієї версії, архітектури, набору й репозиторію. Назви, URL і розміри зі джерела; посилання є змінним місцем отримання, не перерозповсюдженням OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.9.24-5~bpo12+1bookworm-backports / mainamd64Debian 12 backports · main · amd64482 KiB3.1 MiBpool/main/x/xrdp/xrdp_0.9.24-5~bpo12+1_amd64.deb
0.9.24-5~bpo12+1bookworm-backports / mainarm64Debian 12 backports · main · arm64457 KiB3.6 MiBpool/main/x/xrdp/xrdp_0.9.24-5~bpo12+1_arm64.deb

Field source: Debian 12 (Bookworm) backports main amd64

Відомі вразливості

Зіставлення пакетів триває.

CVEКритичністьВплив на версії
[CVE-2026-55639]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create

Medium(5.3)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-55626]

Published:

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with in

High(8)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.6.1-2

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.6.1-2

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 14

[CVE-2026-55238]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did

Medium(5.3)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-54538]

Published:

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header dur

High(7.5)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-44978]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default conf

Medium(5.3)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-44178]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote clie

High(8.8)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-55645]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parser does not perform s

Medium(6.5)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-42218]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker ca

Medium(5.3)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-41521]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC

High(8.2)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-41252]

Published:

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during t

Critical(9.8)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6.1-2, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-35512]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX (graphics dynamic virtual channel) implementation due to insufficient validation of client-cont

High(8.8)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-33689]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message parsing logic. A remote, unauthenticated attacker can trigger

High(8.7)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-33145]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp

Medium(6.3)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-32624]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in its logon processing. In environments where domain_user_separator is configured in xrdp

Medium(6.3)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-33516]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 contain an out-of-bounds read vulnerability during the RDP capability exchange phase. The issue occurs when memory is accessed before validat

High(8.2)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-32623]

Published:

xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based buffer overflow vulnerability in the NeutrinoRDP module. When proxying RDP sessions from xrdp to another server, the mod

Critical(9)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-32105]

Published:

xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code (MAC) signature of encrypted RDP packets when using the "Classic

Critical(9.3)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2026-32107]

Published:

xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege drop process. This improper privilege management co

High(8.8)Невідомо
Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Невідомо · Виправлена: 0.10.1-3.1+deb13u2, 0.10.6-1, 0.9.21.1-1+deb12u3

    Version impact unknown

    nvd · xrdp · debian · bookworm; pypi · xrdp · debian · 12; pypi · xrdp · debian · 13; pypi · xrdp · debian · 14

[CVE-2025-68670]

Published:

xrdp vulnerabilities

Critical(9.1)Невідомо

Зіставлення пакетів триває. Спостережено:

Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Виправлена · Виправлена: 0.9.21.1-1+deb12u2

    usn · xrdp · debian · bookworm; usn · xrdp · debian · 12

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Виправлена · Виправлена: 0.9.21.1-1+deb12u2

    usn · xrdp · debian · bookworm; usn · xrdp · debian · 12

[CVE-2024-39917]

Published:

xrdp vulnerabilities

High(7.3)Невідомо

Зіставлення пакетів триває. Спостережено:

Подробиці (2)
  • 0.9.24-5~bpo12+1 · amd64 · bookworm-backports

    Виправлена · Виправлена: 0.9.21.1-1+deb12u1

    usn · xrdp · debian · bookworm; usn · xrdp · debian · 12

  • 0.9.24-5~bpo12+1 · arm64 · bookworm-backports

    Виправлена · Виправлена: 0.9.21.1-1+deb12u1

    usn · xrdp · debian · bookworm; usn · xrdp · debian · 12

[Наступні результати]

Остання синхронізація:

[Каталог CVE]

Контрольні суми

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

0.9.24-5~bpo12+1 / amd64Спостережено Sep 1, 2026sha256 31ffabb76734…c9fe89a3Контрольна сума джерела

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Контрольна сума джерела (sha256): 31ffabb76734bdca748bfc4e09e4c741900ddafb3904959fa4c9b42fc9fe89a3

Перевірити завантаження

printf '%s %s\n' '31ffabb76734bdca748bfc4e09e4c741900ddafb3904959fa4c9b42fc9fe89a3' 'xrdp_0.9.24-5~bpo12+1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) backports main amd64

0.9.24-5~bpo12+1 / arm64Спостережено Sep 1, 2026sha256 bb39cc930ee6…e032ddc4Контрольна сума джерела

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Контрольна сума джерела (sha256): bb39cc930ee631760cc1ee1907ab0628ea220acdc2a6d7b8d6877132e032ddc4

Перевірити завантаження

printf '%s %s\n' 'bb39cc930ee631760cc1ee1907ab0628ea220acdc2a6d7b8d6877132e032ddc4' 'xrdp_0.9.24-5~bpo12+1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) backports main arm64

Джерела

  • Authoritative source; repository metadata signature verified

    Доказ підпису

    bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6

    Repository-signature verification record
    Signed-object SHA-256
    43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
    Observed SHA-256
    b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Доказ підпису

    bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5

    Repository-signature verification record
    Signed-object SHA-256
    43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
    Observed SHA-256
    9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Доказ підпису

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Доказ підпису

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Доказ підпису

    bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Observed SHA-256
    f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Доказ підпису

    bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14

    Repository-signature verification record
    Signed-object SHA-256
    6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
    Signer fingerprint
    ED541312A33F1128F10B1C6C54404762BBB6E853
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Observed SHA-256
    f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
    Result
    match verified