UBUNTU-CVE-2022-39283

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...

DEBIAN-CVE-2022-24882

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...

The vulnerability of the FreeRDP remote desktop protocol lies in the reading of data beyond the allowed buffer limits, which allows a hacker to cause a service failure.

The vulnerability of the FreeRDP remote desktop protocol lies in the reading of data beyond the acceptable buffer limit. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Out-of-Bounds Write

freerdp is vulnerable to out-of-bounds write. The vulnerability exists due to a lack of validation of the width/height of the graphic update of a rectangle which may trigger an out of bounds write if it is set to '0' allowing writing to the memory allocation set by the point at this unallocated...

CVE-2021-37594

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSSIZE File Contents Request PDU...

freerdp: out of bound read in rfx_process_message_tileset

In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfxprocessmessagetileset. Invalid data fed to RFX decoder results in garbage on screen as colors. This has been patched in 2.1.0...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bounds read in gdi.c...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The attacker use through an out-of-bounds read in the cliprdrreadformatlist function leads to the application crash...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bound read of client memory that is then passed on to the protocol parser...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an unchecked read of array offset in rdpsndrecvwave2pdu...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The attacker use through an out of bound read from memory access in cleardecompresssubcoderlex function leads to the application crash...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists through an out of bound read in updaterecv...

Authorization Bypass

freerdp is vulnerable to authorization bypass. The vulnerability exists through an integer overflow issue in VIDEO channel...

freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB read vulnerability has been detected in ntlmreadChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlmmessage.c...

Unspecified Vulnerability in FreeRDP

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in updaterecvsecondaryorder in versions of FreeRDP prior to 2.1.2. No details of the vulnerability are provided at this time...

DEBIAN-CVE-2020-4032

In FreeRDP before version 2.1.2, there is an integer casting vulnerability in updaterecvsecondaryorder. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2...

DEBIAN-CVE-2020-4030

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...

The vulnerability of the FreeRDP remote desktop protocol lies in the fact that resources are not released after their useful life has ended. This allows a malicious actor to cause service failures.

The vulnerability of the FreeRDPr remote desktop protocol implementation is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the FreeRDP remote desktop protocol lies in its ability to read data beyond the specified buffer, allowing a malicious actor to cause a service failure.

The vulnerability of the FreeRDP remote desktop protocol exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

freerdp: Integer overflow in region.c

A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...