Linux · Security advisory · May 16, 2025

DLA-4166-1: xrdp security update

DLA-4166-1, released May 16, 2025, fixes 1 CVE in xrdp (version 0.9.21.1-1~deb11u2). None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0085
58th percentile

Fixed package versions

ProductReleaseFixed in
xrdpDebian 11.6 (bullseye)0.9.21.1-1~deb11u2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2023-40184 xrdp: xrdp is an open source remote desktop protocol (RDP) server 6.5 0.0085 None reported
Showing 1 to 1 of 1 1