Detections
Analytics
Alpine: multiple xrdp packages: security update to 0.10.5-r0
critical Tenable Cloud Security Plugin ID 437467
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer
overflow vulnerability. The issue stems from improper bounds checking when processing user domain
information during the connection sequence. If exploited, the vulnerability could allow remote attackers
to execute arbitrary code on the target system. The vulnerability allows an attacker to overwrite the
stack buffer and the return address, which could theoretically be used to redirect the execution flow. The
impact of this vulnerability is lessened if a compiler flag has been used to build the xrdp executable
with stack canary protection. If this is the case, a second vulnerability would need to be used to leak
the stack canary value. Upgrade to version 0.10.5 to receive a patch. Additionally, do not rely on stack
canary protection on production systems. (CVE-2025-68670)
See Also
Plugin Details
Severity: Critical
ID: 437467
Version: Revision 1.10
Type: Local
Published: 2/3/2026
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.88
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2025-68670
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 1/27/2026
Reference Information
CVE: CVE-2025-68670