PT-2024-9098 · Xrdp+5 · Xrdp+5

Txtdawg · Published 2024-07-12 · Updated 2026-05-19 · CVE-2024-39917

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: xrdp versions prior to 0.10.0

Description: xrdp is an open source RDP server that has a vulnerability allowing attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter MaxLoginRetry in /etc/xrdp/sesman.ini. However, this mechanism was not effectively working, resulting in xrdp allowing an infinite number of login attempts. This could potentially allow a remote attacker to gain unauthorized access through a brute-force attack.

Recommendations: To resolve the issue, update to version 0.10.0 or later. As a temporary workaround, consider restricting access to the xrdp server or implementing additional authentication measures to minimize the risk of exploitation.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

ALT-PU-2024-12412

ALT-PU-2024-12935

BDU:2024-10780

CVE-2024-39917

DLA-4166-1

GHSA-7W22-H4W7-8J5J

MGASA-2025-0044

OPENSUSE-SU-2025_0336-1

OPENSUSE-SU-2026:10816-1

ROSA-SA-2025-2584

ROSA-SA-2025-2585

SUSE-SU-2025:0335-1

SUSE-SU-2025:0336-1

SUSE-SU-2025:0350-1

SUSE-SU-2025_0335-1

SUSE-SU-2025_0336-1

SUSE-SU-2025_0350-1

Affected Products

Alt Linux

Astra Linux

Debian

Red Os

Suse

Xrdp

References · 44

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39917.json · Exploit
• https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-7w22-h4w7-8j5j · Vendor Advisory
• https://github.com/neutrinolabs/xrdp/commit/19c111c74c913ecc6e4ba9a738ed929a79d2ae8f · Patch
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0350-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4166-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10816-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0044 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0044.html · Security Note
• https://osv.dev/vulnerability/CVE-2024-39917 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0336-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0335-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10780 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-39917 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-39917 · Vendor Advisory