{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-15T03:44:53.694","vulnerabilities":[{"cve":{"id":"CVE-2025-68670","sourceIdentifier":"security-advisories@github.com","published":"2026-01-27T16:16:16.037","lastModified":"2026-02-06T19:59:50.957","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, the vulnerability could allow remote attackers to execute arbitrary code on the target system. The vulnerability allows an attacker to overwrite the stack buffer and the return address, which could theoretically be used to redirect the execution flow. The impact of this vulnerability is lessened if a compiler flag has been used to build the xrdp executable with stack canary protection. If this is the case, a second vulnerability would need to be used to leak the stack canary value. Upgrade to version 0.10.5 to receive a patch. Additionally, do not rely on stack canary protection on production systems."},{"lang":"es","value":"xrdp es un servidor RDP de código abierto. xrdp antes de la v0.10.5 contiene una vulnerabilidad de desbordamiento de búfer basado en pila no autenticado. El problema se deriva de una comprobación de límites incorrecta al procesar la información de dominio del usuario durante la secuencia de conexión. Si se explota, la vulnerabilidad podría permitir a atacantes remotos ejecutar código arbitrario en el sistema objetivo. La vulnerabilidad permite a un atacante sobrescribir el búfer de pila y la dirección de retorno, lo que teóricamente podría usarse para redirigir el flujo de ejecución. El impacto de esta vulnerabilidad se reduce si se ha utilizado una bandera de compilador para construir el ejecutable de xrdp con protección de stack canary. Si este es el caso, se necesitaría usar una segunda vulnerabilidad para filtrar el valor del stack canary. Actualice a la versión 0.10.5 para recibir un parche. Además, no confíe en la protección de stack canary en sistemas de producción."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:neutrinolabs:xrdp:*:*:*:*:*:*:*:*","versionEndExcluding":"0.10.5","matchCriteriaId":"EF7BFA59-F9D6-4B4F-8CB7-137054E9C030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]}],"references":[{"url":"https://github.com/neutrinolabs/xrdp/commit/488c8c7d4d189514a366cd8301b6e816c5218ffa","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.5","source":"security-advisories@github.com","tags":["Product","Release Notes"]},{"url":"https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-rwvg-gp87-gh6f","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/02/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}}]}