Skip to content
Critical xrdp Vulnerabilities Affecting Ubuntu Systems

Critical xrdp Vulnerabilities Affecting Ubuntu Systems

First seen 25 Jun 2026, 18:10 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 26, 2026 at 17:55 UTC
  • •xrdp vulnerabilities could lead to denial of service and arbitrary code execution.
  • •Ubuntu 24.04 LTS is specifically affected by these vulnerabilities.
  • •Immediate updates are recommended to secure systems against these threats.

Multiple vulnerabilities were identified in xrdp, an open-source RDP server, impacting Ubuntu 24.04 LTS. CVE-2025-68670 allows unauthenticated attackers to crash xrdp, leading to denial of service or arbitrary code execution. CVE-2024-39917 permits unlimited login attempts, while CVE-2023-42822 involves out-of-bounds reading due to improper bounds checking. Additionally, CVE-2023-40184 allows bypassing OS-level session restrictions. The vulnerabilities were disclosed on 2026-06-25, with patches available for affected systems. Users are advised to update their xrdp installations promptly to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 97d ago How this analysis works

Timeline

2023-08-30
CVE-2023-40184 published
CVE-2023-40184 was published, allowing attackers to bypass OS-level session restrictions.
N/A
2023-09-27
CVE-2023-42822 published
CVE-2023-42822 was published, revealing an out-of-bounds reading issue in xrdp.
N/A
2024-07-12
CVE-2024-39917 published
CVE-2024-39917 was published, detailing a flaw that allows unlimited login attempts in xrdp.
N/A
2026-01-27
CVE-2025-68670 published
CVE-2025-68670 was published, highlighting a critical vulnerability in xrdp that allows denial of service or code execution.
N/A
2026-06-25
xrdp vulnerabilities disclosed
Multiple vulnerabilities in xrdp were announced, affecting Ubuntu 24.04 LTS and allowing denial of service and code execution.
Ubuntu
2026-06-25
Security advisory published
Linuxsecurity published an advisory detailing the vulnerabilities and urging users to update their systems.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Ubuntu and CVE-2023-40184 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3