Denial Of Service (DoS)

libfreerdp.so is vulnerable to Denial of Service DoS attacks. This vulnerability could allow an attacker to create a specially crafted Remote Desktop Protocol RDP packet that, when received by a vulnerable FreeRDP client, would crash the client...

CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...

CVE-2023-39354

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the nscrledecompressdata function. The Out-Of-Bounds Read occurs because it processes context-Planes without checking if it contains da...

FreeRDP general_YUV444ToRGB_8u_P3AC4R_BGRX Buffer Overflow Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from insufficient data in the pSrc variable in the generalYUV444ToRGB8uP3AC4RBGRX function, which can be exploited by an attacker to...

FreeRDP Null Pointer Reference Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a null pointer reference vulnerability, which stems from the fact that in some special cases, the initialization process of tiles is not completed and tiles will have a NULL...

FreeRDP nsc_rle_decompress_data function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from a failure to check whether context-+greater-than+Planes contains data of sufficient length when processing it in the...

FreeRDP Input Validation Error Vulnerability (CNVD-2023-72252)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from an input validation error vulnerability that originates when insufficient blockLen is provided and proper length validation is not performed, which can be exploited by an attack...

FreeRDP RleDecompress Buffer Overflow Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol by the FreeRDP team. FreeRDP RleDecompress suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash the application and cause a denial of service attac...

The vulnerability of the ncrush_decompress() function in the RDP client of FreeRDP, which allows a hacker to trigger a service failure

The vulnerability of the ncrushdecompress function in the RDP client of FreeRDP is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Vulnerability of the gdi_CreateSurface() function in RDP clients of FreeRDP, allowing attackers to cause service interruptions

The vulnerability of the gdiCreateSurface function in the RDP client FreeRDP is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the nsc_rle_decompress_data() function in the RDP client FreeRDP, which allows a hacker to trigger a service failure

The vulnerability of the nscrledecompressdata function in the RDP client FreeRDP is related to the issue where the operation exits outside the buffer in memory when processing the context-Planes parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures remotel...

Vulnerability of the RDPGFX_CMDID_RESETGRAPHICS() function in the RDP client FreeRDP, which allows a intruder to cause a service failure or exert other effects

The vulnerability of the RDPGFXCMDIDRESETGRAPHICS function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service failures or other adverse effects...

Vulnerability of the progressive_decompress() function in the RDP client FreeRDP, allowing a hacker to trigger a service failure

The vulnerability of the progressivedecompress function in the RDP client FreeRDP is related to the occurrence of operations outside the buffer in memory when processing nXSrc and nYSrc. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SUSE CVE-2023-39352

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values rect-left and rect-top are exactly equal to surface-width and...

SUSE CVE-2023-39353

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...

SUSE CVE-2023-40188

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalLumaToYUV444 function. This Out-Of-Bounds Read occurs because processing is done on the in variable without checking if it...

SUSE CVE-2023-40575

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the generalYUV444ToRGB8uP3AC4RBGRX function. This issue is likely down to insufficient data for the pSrc variable and results in crashe...

CVE-2023-40181

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the zgfxdecompresssegment function. In the context of CopyMemory, it's possible to read data beyond the...

CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...