CVE-2024-39917

No indexed exploits for CVE-2024-39917 yet

xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman.ini`. However, this mechanism was not effectively working. As a result, xrdp allows an infinite number of login attempts.

Affected products: Alt Linux, Astra Linux, Debian, Red Os, Suse, Ubuntu, Xrdp
Neutrinolabs Xrdp: < 0.10.0

Fix: Available
CVSS 3.1: 9.8 CRITICAL
EPSS: 0.6% (46th percentile)
Weakness: CWE-307
NVD status: Modified
Published: 2024-07-12

CVE-2024-39917 at NVD

Authoritative description, scoring and affected products

No exploit for CVE-2024-39917 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.