Поиск уязвимостей
Количество 7
Количество 7
CVE-2026-41252
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices are not properly validated. A malicious VNC server can exploit this flaw by sending crafted messages with out-of-range values, leading to an out-of-bounds write on the heap. This memory corruption can result in a denial of service (DoS) or potentially allow remote code execution (RCE) prior to authentication. This issue has been fixed in version 0.10.6.1.
CVE-2026-41252
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices are not properly validated. A malicious VNC server can exploit this flaw by sending crafted messages with out-of-range values, leading to an out-of-bounds write on the heap. This memory corruption can result in a denial of service (DoS) or potentially allow remote code execution (RCE) prior to authentication. This issue has been fixed in version 0.10.6.1.
CVE-2026-41252
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a ...
ROS-20260818-80-0034
Уязвимость xrdp
ROS-20260818-73-0038
Уязвимость xrdp
BDU:2026-15908
Уязвимость компонента VNC сервера XRDP, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
ALT-PU-2026-13623
ALT-PU-2026-13623: package `xrdp` update to version 0.10.6.1-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-41252 xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices are not properly validated. A malicious VNC server can exploit this flaw by sending crafted messages with out-of-range values, leading to an out-of-bounds write on the heap. This memory corruption can result in a denial of service (DoS) or potentially allow remote code execution (RCE) prior to authentication. This issue has been fixed in version 0.10.6.1. | CVSS3: 9.8 | 1% Низкий | 4 месяца назад |
 | CVE-2026-41252 xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices are not properly validated. A malicious VNC server can exploit this flaw by sending crafted messages with out-of-range values, leading to an out-of-bounds write on the heap. This memory corruption can result in a denial of service (DoS) or potentially allow remote code execution (RCE) prior to authentication. This issue has been fixed in version 0.10.6.1. | CVSS3: 9.8 | 1% Низкий | 4 месяца назад |
| CVE-2026-41252 xrdp is an open source RDP server. Versions 0.10.6 and prior contain a ... | CVSS3: 9.8 | 1% Низкий | 4 месяца назад |
 | ROS-20260818-80-0034 Уязвимость xrdp | CVSS3: 9.8 | 1% Низкий | 3 месяца назад |
| ROS-20260818-73-0038 Уязвимость xrdp | CVSS3: 9.8 | 1% Низкий | 3 месяца назад |
 | BDU:2026-15908 Уязвимость компонента VNC сервера XRDP, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 9.8 | 1% Низкий | 4 месяца назад |
| ALT-PU-2026-13623 ALT-PU-2026-13623: package `xrdp` update to version 0.10.6.1-alt2 | CVSS3: 9.8 | 3 месяца назад |
Уязвимостей на страницу