Neutrinolabs vulnerabilities
34 CVEs and advisories name Neutrinolabs as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-55639xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)
- CVE-2026-55626xrdp: No authentication required with Xvnc backend on RHEL 9
- CVE-2026-55238xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads
- CVE-2026-54538xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER
- CVE-2026-44978xrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification
- CVE-2026-44178xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow
- CVE-2026-55645xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)
- CVE-2026-42218XRDP is vulnerable to a server timing attack, leading to user enumeration
- CVE-2026-41521xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass
- CVE-2026-41252xrdp: lib_palette_update Heap Buffer Overflow & RCE
- CVE-2026-35512xrdp: Heap buffer overflow in EGFX channel
- CVE-2026-33689xrdp: Pre-authentication out-of-bounds reads in channel parsers
- CVE-2026-33145xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman
- CVE-2026-32624xrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculation
- CVE-2026-33516xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers
- CVE-2026-32623xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly
- CVE-2026-32105xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode
- CVE-2026-32107xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails
- CVE-2025-68670xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow
- CVE-2024-39917xrdp allows an ininite number of login attempts
- CVE-2023-42822Unchecked access to font glyph info in xrdp
- CVE-2023-40184Improper handling of session establishment errors in xrdp
- CVE-2022-23477Buffer Overflow in xrdp
- CVE-2022-23484Integer Overflow in xrdp
- CVE-2022-23483Out-of-Bound Read in libxrdp
- CVE-2022-23482Out-of-Bound Read in xrdp
- CVE-2022-23481Out-of-Bound Read in xrdp
- CVE-2022-23480Buffer Overflow in xrdp
- CVE-2022-23479Buffer Overflow occurs in xrdp
- CVE-2022-23478Out of Bound Write in xrdp