https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T22:36:20.633373+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-39917 CVE-2024-39917 — xrdp allows an ininite number of login attempts 2026-09-30T22:36:20.775761+00:00

Affected: neutrinolabs xrdp

xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parameter `MaxLoginRetry` in `/etc/xrdp/sesman.ini`. However, this mechanism was not effectively working. As a result, xrdp allows an infinite number of login attempts.