freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser

A flaw was found in FreeRDP. An unauthenticated remote attacker can cause a Denial of Service DoS by exhausting server memory. When processing Network Level Authentication NLA connections over Transport Layer Security TLS, the server misinterprets invalid protocol bytes as an incomplete packet...

CVE-2026-111378 FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parsenlamodepdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe...

CVE-2026-111378 FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parsenlamodepdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe...

CVE-2026-111378 FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parsenlamodepdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe...

CVE-2026-111378

The FreeRDP software, versions 3.0.0 before 3.32.0 , contains an uncontrolled resource consumption vulnerability within the parse_nla_mode_pdu function. An unauthenticated attacker can trigger this by completing a TLS handshake and streaming bytes that do not begin with the DER SEQUENCE tag 0x30 ...

Red Hat: CVE-2026-111378: freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parsenlamodepdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe...