# CVE-2025-68670: xrdp: xrdp is an open source RDP server CVE-2025-68670 is fixed in 11 products on 1 platform, first by xorgxrdp 0.9.5-2ubuntu0.1~esm3, released January 27, 2026. It is not reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/cve/CVE-2025-68670 - Priority: Urgent - CVSS: 9.8 (critical) - EPSS: 0.0137 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jan 27, 2026 ## Description xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper bounds checking when processing user domain information during the connection sequence. If exploited, the vulnerability could allow remote attackers to execute arbitrary code on the target system. The vulnerability allows an attacker to overwrite the stack buffer and the return address, which could theoretically be used to redirect the execution flow. The impact of this vulnerability is lessened if a compiler flag has been used to build the xrdp executable with stack canary protection. If this is the case, a second vulnerability would need to be used to leak the stack canary value. Upgrade to version 0.10.5 to receive a patch. Additionally, do not rely on stack canary protection on production systems. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | xorgxrdp Fedora 43 | 0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xorgxrdp Ubuntu 18.04.6 LTS (bionic) | 0.9.5-2ubuntu0.1~esm3 | [xorgxrdp 0.9.5-2ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xorgxrdp-0.9.5-2ubuntu0.1-esm3.md) | Jan 27, 2026 | | Linux | xorgxrdp-debuginfo Fedora 43 | 0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xorgxrdp-debugsource Fedora 43 | 0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xorgxrdp-glamor Fedora 43 | 0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xorgxrdp-glamor-debuginfo Fedora 43 | 0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xrdp Debian 11.6 (bullseye) | 0.9.21.1-1~deb11u3 | [DLA-4464-1](https://patchblox.com/security/data/fix/linux/dla-4464-1.md) | Feb 3, 2026 | | Linux | xrdp Debian 12.15 (bookworm) | 0.9.21.1-1+deb12u2 | [DSA-6123-1](https://patchblox.com/security/data/fix/linux/dsa-6123-1.md) | Feb 7, 2026 | | Linux | xrdp Debian 13.5 (trixie) | 0.10.1-3.1+deb13u1 | [DSA-6123-1](https://patchblox.com/security/data/fix/linux/dsa-6123-1.md) | Feb 7, 2026 | | Linux | xrdp Debian 14 | 0.10.1-4.1 | [DEBIAN-CVE-2025-68670](https://patchblox.com/security/data/fix/linux/debian-cve-2025-68670.md) | Jan 27, 2026 | | Linux | xrdp Fedora 43 | 1:0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xrdp Ubuntu 18.04.6 LTS (bionic) | 0.9.5-2ubuntu0.1~esm3 | [xrdp 0.9.5-2ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xrdp-0.9.5-2ubuntu0.1-esm3.md) | Jan 27, 2026 | | Linux | xrdp Ubuntu 20.04 LTS (focal) | 0.9.12-1ubuntu0.1+esm2 | [xrdp 0.9.12-1ubuntu0.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xrdp-0.9.12-1ubuntu0.1-esm2.md) | Jan 27, 2026 | | Linux | xrdp Ubuntu 22.04.1 LTS (jammy) | 0.9.17-2ubuntu3+esm2 | [xrdp 0.9.17-2ubuntu3+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xrdp-0.9.17-2ubuntu3-esm2.md) | Jan 27, 2026 | | Linux | xrdp Ubuntu 24.04.5 LTS (noble) | 0.9.24-4ubuntu0.1~esm1 | [xrdp 0.9.24-4ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-xrdp-0.9.24-4ubuntu0.1-esm1.md) | Jan 27, 2026 | | Linux | xrdp Ubuntu 25.10 (questing) | 0.10.1-3.1+deb13u1build0.25.10.1 | [xrdp 0.10.1-3.1+deb13u1build0.25.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-xrdp-0.10.1-3.1-deb13u1build0.25.10.1.md) | Jan 27, 2026 | | Linux | xrdp opensuse-leap 15.6 | 0.9.13.1-150600.15.6.1 | [SUSE-SU-2026:0433-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0433-1.md) | Feb 11, 2026 | | Linux | xrdp opensuse-leap 16.0 | 0.9.26-bp160.2.1 | [OPENSUSE-SU-2026:20167-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20167-1.md) | Feb 3, 2026 | | Linux | xrdp sles 15.6 | 0.9.13.1-150600.15.6.1 | [SUSE-SU-2026:0433-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0433-1.md) | Feb 11, 2026 | | Linux | xrdp sles 15.7 | 0.9.13.1-150600.15.6.1 | [SUSE-SU-2026:0433-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0433-1.md) | Feb 11, 2026 | | Linux | xrdp-debuginfo Fedora 43 | 1:0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xrdp-debugsource Fedora 43 | 1:0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xrdp-devel Fedora 43 | 1:0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | | Linux | xrdp-pulseaudio-installer Ubuntu 18.04.6 LTS (bionic) | 0.9.5-2ubuntu0.1~esm3 | [xrdp-pulseaudio-installer 0.9.5-2ubuntu0.1~esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xrdp-pulseaudio-installer-0.9.5-2ubuntu0.1-esm3.md) | Jan 27, 2026 | | Linux | xrdp-selinux Fedora 43 | 1:0.10.5-1.fc43 | [FEDORA-2026-FEBEA89AC3](https://patchblox.com/security/data/fix/linux/fedora-2026-febea89ac3.md) | Jan 28, 2026 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.