Lucene search
+L

5 matches found

SUSE CVE
SUSE CVE
•added 2026/07/21 1:06 p.m.•14 views

SUSE CVE-2026-54538

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...

7.5CVSS5.4AI score0.00672EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/20 4:57 p.m.•17 views

CVE-2026-54538

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...

7.5CVSS5.5AI score0.00672EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/07/20 4:57 p.m.•48 views

CVE-2026-54538

CVE-2026-54538 affects xrdp up to version 0.10.6, where the server fails to validate the totalLength field in the RDP protocol control header. An unauthenticated attacker can send a crafted packet that makes the xrdp process enter an infinite, CPU‑bound loop, due to a pointer not advancing and by...

7.5CVSS5.4AI score0.00672EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/07/20 4:57 p.m.•9 views

CVE-2026-54538 xrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...

7.5CVSS5.4AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/20 12:00 a.m.•1 views

CVE-2026-54538: Loop with Unreachable Exit Condition

xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...

7.5CVSS5.7AI score0.00672EPSS
SaveExploits0References3
Rows per page
Query Builder