CVE-2026-121960

FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPRASSERT and abort the server...

CVE-2026-121960

FreeRDP versions prior to 3.32.2 are vulnerable to an unauthenticated Denial of Service (DoS) vulnerability. The issue exists in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens . An unauthenticated attacker can trigger a fatal WINPR_ASSERT and abort the server process by s...

EUVD-2026-116960

FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPRASSERT and abort the server...

CVE-2026-121960 FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest

FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPRASSERT and abort the server...

PT-2026-137012

FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPR ASSERT and abort the server...

CVE-2026-121960: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP…

FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPRASSERT and abort the server...

SUSE CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...

rdesktop Buffer Overflow RCE

The vulnerability of the “csspreadtsrequest” function in the RDP client rdesktop implementation is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

rdesktop Out-of-Bounds Read Vulnerability

rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services. An out-of-bounds read vulnerability exists in the csspreadtsrequest function in rdesktop 1.8.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

ALPINE-CVE-2018-8793

rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function csspreadtsrequest that results in a memory corruption and probably even a remote code execution...

CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...

ALPINE-CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...

UBUNTU-CVE-2018-8792

rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function csspreadtsrequest that results in a Denial of Service segfault...

PT-2019-1458

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to the implementation of the cssp read tsrequest function in the RDP client, which is associated with an out-of-bounds memory read. This can be exploited by a remote...