Lucene search
K

9 matches found

Redos
Redos
added 2026/06/15 12:0 a.m.6 views

ROS-20260615-73-0008

The vulnerability of the StreamEnsureCapacity function in the RDP client FreeRDP is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

7.5CVSS5.3AI score0.00346EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2026/05/12 11:31 p.m.17 views

freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

7.5CVSS5.8AI score0.00346EPSS
Exploits1References6
OSV
OSV
added 2026/02/25 10:16 p.m.2 views

DEBIAN-CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS5.3AI score0.00346EPSS
Exploits1References1
OSV
OSV
added 2026/02/25 10:16 p.m.2 views

UBUNTU-CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS5.8AI score0.00346EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2026/02/25 9:7 p.m.6 views

CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS5.2AI score0.00346EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2026/02/25 9:7 p.m.4 views

CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS5.9AI score0.00346EPSS
Exploits1References2
CVE
CVE
added 2026/02/25 9:7 p.m.98 views

CVE-2026-27951

Freerdp CVE-2026-27951 affects all FreeRDP clients/servers prior to 3.23.0, where Stream_EnsureCapacity can loop endlessly on 32‑bit systems with physical memory >= SIZE_MAX. Impact: potential denial of service (availability). Mitigation: upgrade to 3.23.0 or later (patch included). If exploit...

7.5CVSS5.3AI score0.00346EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2026/02/25 9:7 p.m.7 views

EUVD-2026-8755

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

5.3CVSS5.3AI score0.00346EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/02/25 12:0 a.m.4 views

PT-2026-22022

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description The Stream EnsureCapacity function in FreeRDP versions prior to 3.23.0 can create an endless blocking loop. This issue may affect all client and server implementations using FreeRDP. Exploitation is...

9.8CVSS5.1AI score0.00599EPSS
Exploits9References107
Rows per page
Query Builder