Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-55645: xrdp may crash from malformed client data

CVE-2026-55645 · published 3 months ago

Summary

The xrdp remote desktop server (versions up to 0.10.6) can stop working if it receives a specially crafted, incomplete control message during connection. This could cause the service to shut down for that user, though other connections remain unaffected. Upgrade to version 0.10.6.1 or later to prevent the issue.

What to do

Update neutrinolabs xrdp to version 0.10.6.1 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
Debian:11	debian	xrdp	All versions
Debian:12	debian	xrdp	All versions
Debian:13	debian	xrdp	All versions
Debian:14	debian	xrdp	All versions
–	neutrinolabs	xrdp	< 0.10.6.1
Ubuntu:Pro:14.04:LTS	canonical	xrdp	All versions

Original advisory text

xrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parser does not perform sufficient length validation before reading specific data fields from the network stream. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted, truncated Client Control PDU. Due to missing bounds checks, the xrdp process may perform out-of-bounds memory reads, which can result in the termination of the service (Denial of Service). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service.This issue has been fixed in version 0.10.6.1.

References

https://ubuntu.com/security/CVE-2026-55645 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-55645 Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2026-55645 Vendor Advisory
https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1 Release Notes
https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-3m4m-h22g-c7xx Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55645... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-55645 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

6.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-125Out-of-bounds Read

Timeline

Published20 Jul 2026

Updated4 Nov 2026

First seen8 Jul 2026

Sources

DEBIAN-CVE-2026-55645 · OSV

CVE-2026-55645 · MITRE

CVE-2026-55645 · NVD

UBUNTU-CVE-2026-55645 · OSV

CVE-2026-55645 · OSV

GHSA-3m4m-h22g-c7xx · GHSA

Track software like this

Free during beta