Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.rc > #410034 > unrolled thread
| Started by | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| First post | 2026-01-28 11:50 +0100 |
| Last post | 2026-02-08 13:50 +0100 |
| Articles | 7 — 2 participants |
Back to article view | Back to linux.debian.bugs.rc
Bug#1126537: xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow Salvatore Bonaccorso <carnil@debian.org> - 2026-01-28 11:50 +0100
Processed: xrdp: diff for NMU version 0.10.1-4.1 "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-01-31 21:40 +0100
Bug#1126537: xrdp: diff for NMU version 0.10.1-4.1 Salvatore Bonaccorso <carnil@debian.org> - 2026-01-31 21:40 +0100
Bug#1126537: marked as done (xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-02-01 17:50 +0100
Bug#1126537: marked as done (xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-02-02 11:40 +0100
Bug#1126537: marked as done (xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-02-08 13:50 +0100
Bug#1126537: marked as done (xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-02-08 13:50 +0100
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2026-01-28 11:50 +0100 |
| Subject | Bug#1126537: xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow |
| Message-ID | <Mibhv-dW3W-3@gated-at.bofh.it> |
Source: xrdp
Version: 0.10.1-3.1
Severity: grave
Tags: security upstream
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>
Hi,
The following vulnerability was published for xrdp.
CVE-2025-68670[0]:
| xrdp is an open source RDP server. xrdp before v0.10.5 contains an
| unauthenticated stack-based buffer overflow vulnerability. The issue
| stems from improper bounds checking when processing user domain
| information during the connection sequence. If exploited, the
| vulnerability could allow remote attackers to execute arbitrary code
| on the target system. The vulnerability allows an attacker to
| overwrite the stack buffer and the return address, which could
| theoretically be used to redirect the execution flow. The impact of
| this vulnerability is lessened if a compiler flag has been used to
| build the xrdp executable with stack canary protection. If this is
| the case, a second vulnerability would need to be used to leak the
| stack canary value. Upgrade to version 0.10.5 to receive a patch.
| Additionally, do not rely on stack canary protection on production
| systems.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2025-68670
https://www.cve.org/CVERecord?id=CVE-2025-68670
[1] https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-rwvg-gp87-gh6f
[2] https://github.com/neutrinolabs/xrdp/commit/0d6964415ac31f8240ed894de1ff626bf4683eac (v0.10.5)
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
[toc] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2026-01-31 21:40 +0100 |
| Subject | Processed: xrdp: diff for NMU version 0.10.1-4.1 |
| Message-ID | <MjpV7-eMj4-1@gated-at.bofh.it> |
| In reply to | #410034 |
Processing control commands: > tags 1126537 + patch Bug #1126537 [src:xrdp] xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow Added tag(s) patch. > tags 1126537 + pending Bug #1126537 [src:xrdp] xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow Added tag(s) pending. -- 1126537: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126537 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [next] | [standalone]
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2026-01-31 21:40 +0100 |
| Subject | Bug#1126537: xrdp: diff for NMU version 0.10.1-4.1 |
| Message-ID | <MjpV7-eMj4-3@gated-at.bofh.it> |
| In reply to | #410034 |
[Multipart message — attachments visible in raw view] — view raw
Control: tags 1126537 + patch Control: tags 1126537 + pending Dear maintainer, I've prepared an NMU for xrdp (versioned as 0.10.1-4.1) and uploaded it to DELAYED/2. Please feel free to tell me if I should cancel it. Regards, Salvatore
[toc] | [prev] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2026-02-01 17:50 +0100 |
| Subject | Bug#1126537: marked as done (xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow) |
| Message-ID | <MjIO5-eZ9E-9@gated-at.bofh.it> |
| In reply to | #410034 |
[Multipart message — attachments visible in raw view] — view raw
Your message dated Sun, 01 Feb 2026 16:18:35 +0000 with message-id <E1vma9j-00000008C6G-24oq@fasolo.debian.org> and subject line Bug#1126537: fixed in xrdp 0.10.5-1 has caused the Debian Bug report #1126537, regarding xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 1126537: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126537 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2026-02-02 11:40 +0100 |
| Subject | Bug#1126537: marked as done (xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow) |
| Message-ID | <MjZvz-fajg-7@gated-at.bofh.it> |
| In reply to | #410034 |
[Multipart message — attachments visible in raw view] — view raw
Your message dated Mon, 02 Feb 2026 10:34:33 +0000 with message-id <E1vmrGL-0000000CGBP-14KZ@fasolo.debian.org> and subject line Bug#1126537: fixed in xrdp 0.10.1-4.1 has caused the Debian Bug report #1126537, regarding xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 1126537: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126537 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2026-02-08 13:50 +0100 |
| Subject | Bug#1126537: marked as done (xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow) |
| Message-ID | <MmcoF-gDEv-3@gated-at.bofh.it> |
| In reply to | #410034 |
[Multipart message — attachments visible in raw view] — view raw
Your message dated Sun, 08 Feb 2026 12:47:06 +0000 with message-id <E1vp4Bu-00000008oTw-1HLB@fasolo.debian.org> and subject line Bug#1126537: fixed in xrdp 0.10.1-3.1+deb13u1 has caused the Debian Bug report #1126537, regarding xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 1126537: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126537 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2026-02-08 13:50 +0100 |
| Subject | Bug#1126537: marked as done (xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow) |
| Message-ID | <MmcoF-gDEv-15@gated-at.bofh.it> |
| In reply to | #410034 |
[Multipart message — attachments visible in raw view] — view raw
Your message dated Sun, 08 Feb 2026 12:48:08 +0000 with message-id <E1vp4Cu-00000008oef-16dJ@fasolo.debian.org> and subject line Bug#1126537: fixed in xrdp 0.9.21.1-1+deb12u2 has caused the Debian Bug report #1126537, regarding xrdp: CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based Buffer Overflow to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 1126537: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126537 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.bugs.rc
csiph-web