StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · xrdp

`xrdp` CVE matrix across Linux distros

149 CVEs tracked across 8 distro releases. Showing the 149 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2008-5902→ fixed in0.4.0~dfsg-9
CVE-2008-5903→ fixed in0.4.0~dfsg-9
CVE-2008-5904→ fixed in0.4.0~dfsg-9
CVE-2013-1430→ fixed in0.9.1~2016121126+git5171fa7-1
CVE-2017-16927→ fixed in0.9.4-3
CVE-2017-6967→ fixed in0.9.1-9
CVE-2020-4044→ fixed in0.9.12-1.1
CVE-2022-23468→ fixed in0.9.21.1-1~deb11u1
+13 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y xrdp

Debian bookworm

Source: Debian

CVE-2008-5902→ fixed in0.4.0~dfsg-9
CVE-2008-5903→ fixed in0.4.0~dfsg-9
CVE-2008-5904→ fixed in0.4.0~dfsg-9
CVE-2013-1430→ fixed in0.9.1~2016121126+git5171fa7-1
CVE-2017-16927→ fixed in0.9.4-3
CVE-2017-6967→ fixed in0.9.1-9
CVE-2020-4044→ fixed in0.9.12-1.1
CVE-2022-23468→ fixed in0.9.21.1-1
+14 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y xrdp

Debian trixie

Source: Debian

CVE-2008-5902→ fixed in0.4.0~dfsg-9
CVE-2008-5903→ fixed in0.4.0~dfsg-9
CVE-2008-5904→ fixed in0.4.0~dfsg-9
CVE-2013-1430→ fixed in0.9.1~2016121126+git5171fa7-1
CVE-2017-16927→ fixed in0.9.4-3
CVE-2017-6967→ fixed in0.9.1-9
CVE-2020-4044→ fixed in0.9.12-1.1
CVE-2022-23468→ fixed in0.9.21.1-1
+14 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y xrdp

Alpine v3.20

Source: Alpine secdb

CVE-2020-4044→ fixed in0.9.13.1-r0
CVE-2021-36158→ fixed in0.9.15-r1
CVE-2022-23468→ fixed in0.9.21.1-r0
CVE-2022-23477→ fixed in0.9.21.1-r0
CVE-2022-23478→ fixed in0.9.21.1-r0
CVE-2022-23479→ fixed in0.9.21.1-r0
CVE-2022-23480→ fixed in0.9.21.1-r0
CVE-2022-23481→ fixed in0.9.21.1-r0
+7 more in Alpine v3.20

Single command to patch all of these:

apk add --upgrade xrdp

Alpine v3.21

Source: Alpine secdb

CVE-2020-4044→ fixed in0.9.13.1-r0
CVE-2021-36158→ fixed in0.9.15-r1
CVE-2022-23468→ fixed in0.9.21.1-r0
CVE-2022-23477→ fixed in0.9.21.1-r0
CVE-2022-23478→ fixed in0.9.21.1-r0
CVE-2022-23479→ fixed in0.9.21.1-r0
CVE-2022-23480→ fixed in0.9.21.1-r0
CVE-2022-23481→ fixed in0.9.21.1-r0
+7 more in Alpine v3.21

Single command to patch all of these:

apk add --upgrade xrdp

Alpine edge

Source: Alpine secdb

CVE-2020-4044→ fixed in0.9.13.1-r0
CVE-2021-36158→ fixed in0.9.15-r1
CVE-2022-23468→ fixed in0.9.21.1-r0
CVE-2022-23477→ fixed in0.9.21.1-r0
CVE-2022-23478→ fixed in0.9.21.1-r0
CVE-2022-23479→ fixed in0.9.21.1-r0
CVE-2022-23480→ fixed in0.9.21.1-r0
CVE-2022-23481→ fixed in0.9.21.1-r0
+16 more in Alpine edge

Single command to patch all of these:

apk add --upgrade xrdp

Alpine v3.18

Source: Alpine secdb

CVE-2020-4044→ fixed in0.9.13.1-r0
CVE-2021-36158→ fixed in0.9.15-r1
CVE-2022-23468→ fixed in0.9.21.1-r0
CVE-2022-23477→ fixed in0.9.21.1-r0
CVE-2022-23478→ fixed in0.9.21.1-r0
CVE-2022-23479→ fixed in0.9.21.1-r0
CVE-2022-23480→ fixed in0.9.21.1-r0
CVE-2022-23481→ fixed in0.9.21.1-r0
+7 more in Alpine v3.18

Single command to patch all of these:

apk add --upgrade xrdp

Alpine v3.19

Source: Alpine secdb

CVE-2020-4044→ fixed in0.9.13.1-r0
CVE-2021-36158→ fixed in0.9.15-r1
CVE-2022-23468→ fixed in0.9.21.1-r0
CVE-2022-23477→ fixed in0.9.21.1-r0
CVE-2022-23478→ fixed in0.9.21.1-r0
CVE-2022-23479→ fixed in0.9.21.1-r0
CVE-2022-23480→ fixed in0.9.21.1-r0
CVE-2022-23481→ fixed in0.9.21.1-r0
+7 more in Alpine v3.19

Single command to patch all of these:

apk add --upgrade xrdp

Is YOUR xrdp patched?

5-second check on your actual server. The quickscan reads your installed xrdp version and matches against the same 149-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)