5261 matches found
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling
A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol RDP packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Out-of-bounds read leads to memory disclosure or client crash
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can provide a specially crafted H.264 video stream that causes the client's H.264 decoder to read beyond its allocated memory. This out-of-bounds read can lead to the disclosure of sensitive client memory or cause the...
FreeRDP: FreeRDP: Denial of Service via malformed media data
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send specially crafted media data to a connected client. This malformed data can trigger a heap out-of-bounds read vulnerability within the TSMF FFmpeg decoder, leading to the client application crashing. This can...
FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-
FreeRDP-境界外読み取り-CVE-2024-32459-...
FreeRDP
FreeRDP: リモートデスクトッププロトコルの実装 FreeRDP は、Remote Desktop Protocol RDP のフリー実装であり、Apache ライセンスの下で公開されています。 相互運用性がついにあなたのコンピューティング体験を解放する世界で、どこでも、好きなようにソフトウェアを使う自由をお楽しみください。 コード品質ステータス !\arm,ppc,ricsv\ architecture buildshttps://github.com/FreeRDP/FreeRDP/actions/workflows/alt-architectures.yml/badge.sv...
CVE-2020-11097-POC
crash FreeRDP using CVE-2020-11097 POC 使用 CVE-2020-11097 POC 使 FreeRDP 崩溃 start server as python3 test.py 以 python3 test.py 启动服务器 connect to server by follwoing command 使用以下命令连接服务器 xfreerdp /v:127.0.0.1:3389 /u:user /p:pass /gt:127.0.0.1 /log-level:DEBUG...
BKScan
BKScan BlueKeep CVE-2019-0708 扫描器，支持未认证和认证两种模式（即当启用网络级别身份验证（NLA）时）。 要求： Windows RDP 服务器 如果 RDP 服务器上启用了 NLA，则为属于“Remote Desktop Users”组的有效用户/密码 它基于 FreeRDP，并使用 Docker 来简化编译/执行。它应可在任何 UNIX 环境下运行，并且主要在 Linux/Ubuntu 上测试过。 使用 构建 安装前置依赖： root@kitploit: sudo apt-get install docker.io 在名为 bkscan 的 Docker...
nlahoney
NLA Honeypot 関連研究 FreeRDP-ResearchServer/: RDPハンドシェイクを完了し、ユーザーをキックアウトし（アカウントが設定されていないため）、6つのメッセージを/tmpにダンプする、変更されたFreeRDP 2.2.0です FreeRDP-Pot-Patches/: 本番運用を目的としたFreeRDPサーバー向けパッチ。RDPハンドシェイクを完了し、ユーザーをキックアウトし（アカウントが設定されていないため）、6つのメッセージを/tmpにダンプします dump/: キャプチャされたNegotiate/Challenge/Authenticate...
CVE-2020-11019
CVE-2020-11019 FreeRDP 2.0.0以下では、ロガーを"WLOGTRACE"に設定して実行する際、無効な配列インデックスの読み取りによりアプリケーションがクラッシュする可能性があります。データがローカルターミナルに文字列として出力される可能性があります。これは2.1.0で修正されました。 authentication| complexity| vector ---|---|--- SINGLE| LOW| NETWORK...
CVE-2026-91947
GHSA-6mpx-c8rj-whj5: FreeRDP server DRDYNVC parser use-after-free during concurrent channel close...
UBUNTU-CVE-2026-91947
GHSA-6mpx-c8rj-whj5: FreeRDP server DRDYNVC parser use-after-free during concurrent channel close...
CVE-2026-91949
GHSA-x7v6-xfx3-52j6: FreeRDP server continues after negotiation failure and dispatches a failure code as RDSTLS...
CVE-2026-91946
GHSA-r7jx-j9h7-j4xj: FreeRDP RDPGFX ResetGraphics discloses up to 300 bytes of uninitialized heap memory...