PatchTheCVExrdp vulnerabilities
Recent CVEs affecting xrdp products. 3 tracked.
xrdp has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2009-01-15. Highest priority: CVE-2008-5904 (score 55/100).
- CVE-2008-5904 HIGH 7.5 UPGRADE The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP se
- CVE-2008-5903 HIGH 7.5 UPGRADE Array index error in the xrdp_bitmap_def_proc function in xrdp/funcs.c in xrdp 0.4.1 and earlier allows remote
- CVE-2008-5902 HIGH 7.5 UPGRADE Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows
FAQ
How do I fix xrdp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xrdp being exploited right now?
None of the tracked xrdp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xrdp CVE should I patch first?
CVE-2008-5904 currently ranks highest (55/100): The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP se.