FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-

FreeRDP-境界外読み取り-CVE-2024-32459-...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfSetWindowMinMaxInfo dereferenced a freed xfAppWindow pointer because xfrailgetwindow in xfrailserverminmaxinfo returned an unprotected pointer from the railWindows hash table. This could allow the main...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an invalid offset validation, leading to Out Of Bound Write errors. This issue can occur when the values rect-left and rect-top are exactly equal to...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there was a heap-buffer-overflow vulnerability at 24 bytes before the allocation, in the function winpralignedoffsetrecalloc. This issue has been fixed in version 3.24.2...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a malicious RDP server could trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. The audinprocessformats function reuses the callback-formatscount...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides an empty password value. This issue affects FreeRDP-based RDP Server implementations. RDP clients are not affected. The...

Astra Linux – Vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing relied on cbData/remaining length, and never validated against the minimum size implied by cx/cy. A malicious server could trigger a client-side global buffer overflow, resulting in a crash...

Astra Linux – Vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.22.0, audinserverrecvformats freed an incorrect number of audio formats upon parse failure i + i, resulting in out-of-bounds access in audioformatsfree. This vulnerability has been fixed in version 3.22.0...

FreeRDP

FreeRDP：远程桌面协议实现 FreeRDP 是远程桌面协议（RDP）的一个自由实现，基于 Apache 许可证发布。 在一个互操作性最终能够解放你的计算体验的世界里，随心所欲地在你想要的地方、以你想要的方式使用你的软件。 代码质量状态 !\arm,ppc,ricsv\ architecture buildshttps://github.com/FreeRDP/FreeRDP/actions/workflows/alt-architectures.yml/badge.svg !\freebsd\ architecture...

BKScan

BKScan BlueKeep（CVE-2019-0708）スキャナーで、非認証および認証済み（つまり、ネットワークレベル認証（NLA）が有効な場合）の両方で動作します。 要件: Windows RDPサーバー RDPサーバーでNLAが有効な場合、「Remote Desktop Users」グループに属する有効なユーザー名/パスワード これは FreeRDP に基づいており、コンパイル/実行を容易にするために Docker を使用しています。任意のUNIX環境で動作するはずで、主にLinux/Ubuntuでテストされています。 使用方法 ビルド 前提条件をインストール:...

nlahoney

NLA 蜜罐相关研究 FreeRDP-ResearchServer/：一个修改过的 FreeRDP 2.2.0，它完成 RDP 握手，将用户踢出（因为没有设置账户），并将六条消息转储到 /tmp FreeRDP-Pot-Patches/：针对 FreeRDP 服务器的补丁，该服务器面向生产环境，完成 RDP 握手，将用户踢出（因为没有设置账户），并将六条消息转储到 /tmp dump/：捕获的 Negotiate/Challenge/Authenticate Out/In 消息转储 NCC-FreeRDP-pyparser/nccfreerdppyparser.py：从 dump/...

CVE-2020-11097-POC

CVE-2020-11097 POC を使用して FreeRDP をクラッシュさせる python3 test.py でサーバーを起動する 以下のコマンドでサーバーに接続する xfreerdp /v:127.0.0.1:3389 /u:user /p:pass /gt:127.0.0.1 /log-level:DEBUG...

CVE-2021-41160

CVE-2021-41160 FreeRDP es una implementación libre del Protocolo de Escritorio Remoto RDP, publicada bajo la licencia Apache. En las versiones afectadas, un servidor malicioso podría provocar escrituras fuera de los límites en un cliente conectado. Las conexiones que utilizan GDI o SurfaceCommand...

RLSA-2026:66349 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, release...

RLSA-2026:66347 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

freerdp security update

2:3.10.3-12.11 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247346...

Fedora 45 : freerdp (2026-d2a288c8eb)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d2a288c8eb advisory. Update to 3.31.1 ---- Update to 3.31.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...