Approved changes feed: RSS · Atom

cpe:2.3:a:neutrinolabs:xrdp:0.9.17:*:*:*:*:*:*:*

part: a version: 0.9.17 update: *

VendorNeutrinolabs (065ae785-8eaa-544e-86f7-1e48bb3603a2)
ProductXrdp (70a9ee44-2c51-5f1a-a0ff-b1f778661d7c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xrdp purl2cpe 2026-06-01 10:13:01.239532
pkg:deb/ubuntu/xrdp purl2cpe 2026-06-01 10:13:01.239533
pkg:github/neutrinolabs/xrdp purl2cpe 2026-06-01 10:13:01.239535
pkg:rpm/fedora/xrdp purl2cpe 2026-06-01 10:13:01.239537
pkg:rpm/opensuse/xrdp purl2cpe 2026-06-01 10:13:01.239538
pkg:sourceforge/xrdp purl2cpe 2026-06-01 10:13:01.239540

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23613 vulnerable 2026-06-08 05:40:58.038739 Privilege escalation on xrdp
HIGH (7.8)
xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.
Published: 2022-02-07T21:40:09.000Z
Updated: 2025-04-23T19:07:05.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.