CVE-2026-55645
Received Received - Intake

Buffer Overflow in xrdp RDP Server

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: GitHub, Inc.

Description
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parser does not perform sufficient length validation before reading specific data fields from the network stream. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted, truncated Client Control PDU. Due to missing bounds checks, the xrdp process may perform out-of-bounds memory reads, which can result in the termination of the service (Denial of Service). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service.This issue has been fixed in version 0.10.6.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-55645
EUVD
EUVD-2026-46026

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
neutrinolabs xrdp to 0.10.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects xrdp, an open-source RDP server, in versions 0.10.6 and earlier. It involves improper length validation when processing Client Control PDUs during RDP connection setup. A remote attacker can send a specially crafted, truncated PDU to trigger out-of-bounds memory reads, causing the xrdp process to crash and leading to a Denial of Service.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes in xrdp processes or unusual network traffic patterns. Check logs for xrdp service crashes or segmentation faults. Use network monitoring tools like tcpdump or Wireshark to inspect RDP traffic for malformed Client Control PDUs. Enable verbose logging in xrdp to capture detailed connection sequences.

Impact Analysis

The primary impact is a Denial of Service where the xrdp service crashes due to memory corruption. However, since xrdp forks a new process per connection, a single crash is unlikely to disrupt the entire service. The attack requires no authentication and can be executed remotely.

Compliance Impact

This vulnerability primarily causes Denial of Service (DoS) by crashing the xrdp service through out-of-bounds memory reads. It does not directly expose or leak sensitive data, which is a key concern for GDPR and HIPAA compliance. However, service disruption could impact availability of systems handling personal or health data, potentially violating compliance requirements for data accessibility and integrity.

Mitigation Strategies

Upgrade xrdp to version 0.10.6.1 or later immediately. If upgrading is not possible, restrict network access to xrdp using firewalls or network segmentation to limit exposure. Monitor xrdp logs for signs of exploitation attempts. Consider disabling xrdp if it is not essential.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-55645. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart