The vulnerability in neutrinolabs xrdp (versions before 0.10.6) is an out-of-bounds read (CWE-125) in the pre-authentication RDP message parsing logic. This arises from improper validation of input buffer lengths when processing dynamic channel communication packets. An unauthenticated remote attacker can trigger this by sending crafted packet sequences during connection setup, leading to memory access beyond allocated bounds. The impact includes denial-of-service through process crashes and possible disclosure of sensitive memory contents. The flaw has been addressed in xrdp version 0.10.6.

Successful exploitation allows a remote unauthenticated attacker to cause a denial-of-service condition by crashing the xrdp process. Additionally, there is potential for sensitive information disclosure from the service's memory space. The vulnerability affects all versions of xrdp prior to 0.10.6.

Upgrade xrdp to version 0.10.6 or later, where this vulnerability has been fixed. Since the vendor advisory confirms the fix in 0.10.6, applying this official update fully mitigates the issue. No other mitigation steps are indicated.