Lucene search
K

21 matches found

RedHat Linux
RedHat Linux
added 2026/05/26 5:5 a.m.8 views

freerdp: FreeRDP: Denial of service via heap use-after-free during auto-reconnect

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This vulnerability, a heap use-after-free, occurs during an auto-reconnect operation when the xfclipboardformatsfree function frees memory that is still being accessed by another thread. A remote attacker could...

9.8CVSS5.8AI score0.00164EPSS
Exploits1References13
RedHat Linux
RedHat Linux
added 2026/05/19 4:22 p.m.5 views

freerdp: FreeRDP: Denial of service via heap use-after-free during auto-reconnect

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This vulnerability, a heap use-after-free, occurs during an auto-reconnect operation when the xfclipboardformatsfree function frees memory that is still being accessed by another thread. A remote attacker could...

9.8CVSS5.8AI score0.00164EPSS
Exploits1References13
RedHat Linux
RedHat Linux
added 2026/05/11 4:22 p.m.4 views

freerdp: FreeRDP: Denial of service via heap use-after-free during auto-reconnect

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This vulnerability, a heap use-after-free, occurs during an auto-reconnect operation when the xfclipboardformatsfree function frees memory that is still being accessed by another thread. A remote attacker could...

9.8CVSS5.8AI score0.00164EPSS
Exploits1References13
SUSE CVE
SUSE CVE
added 2026/02/28 12:24 a.m.1 views

SUSE CVE-2026-25997

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfclipboardformatequal reads freed lastSentFormats memory because xfclipboardformatsfree called from the cliprdr channel thread during auto-reconnect frees the array while the X11 event thread concurrently...

5.3CVSS5.8AI score0.00164EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/02/26 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-25997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfclipboardformatequal reads freed lastSentFormats memory because...

9.8CVSS5.8AI score0.00164EPSS
Exploits1References4
NVD
NVD
added 2026/02/25 9:16 p.m.4 views

CVE-2026-25997

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfclipboardformatequal reads freed lastSentFormats memory because xfclipboardformatsfree called from the cliprdr channel thread during auto-reconnect frees the array while the X11 event thread concurrently...

9.8CVSS0.00164EPSS
Exploits1References9
OSV
OSV
added 2026/02/25 9:16 p.m.0 views

UBUNTU-CVE-2026-25997

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfclipboardformatequal reads freed lastSentFormats memory because xfclipboardformatsfree called from the cliprdr channel thread during auto-reconnect frees the array while the X11 event thread concurrently...

9.8CVSS5.8AI score0.00164EPSS
Exploits1References11
CVE
CVE
added 2026/02/25 8:38 p.m.14 views

CVE-2026-25997

CVE-2026-25997 affects FreeRDP prior to 3.23.0. The issue is a heap use-after-free in the clipboard path: the function xf_clipboard_format_equal reads freed lastSentFormats because xf_clipboard_formats_free frees the array while the X11 event thread concurrently iterates it in xf_clipboard_change...

9.8CVSS5.4AI score0.00164EPSS
Exploits1References9Affected Software1
EUVD
EUVD
added 2026/02/25 8:38 p.m.2 views

EUVD-2026-8737

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfclipboardformatequal reads freed lastSentFormats memory because xfclipboardformatsfree called from the cliprdr channel thread during auto-reconnect frees the array while the X11 event thread concurrently...

6.9CVSS5.4AI score0.00164EPSS
Exploits1References9
Vulnrichment
Vulnrichment
added 2026/02/25 8:38 p.m.1 views

CVE-2026-25997 FreeRDP has heap-use-after-free in xf_clipboard_format_equal

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfclipboardformatequal reads freed lastSentFormats memory because xfclipboardformatsfree called from the cliprdr channel thread during auto-reconnect frees the array while the X11 event thread concurrently...

6.9CVSS5.4AI score0.00164EPSS
Exploits1References9
AlpineLinux
AlpineLinux
added 2026/02/25 8:38 p.m.2 views

CVE-2026-25997

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfclipboardformatequal reads freed lastSentFormats memory because xfclipboardformatsfree called from the cliprdr channel thread during auto-reconnect frees the array while the X11 event thread concurrently...

9.8CVSS5.9AI score0.00164EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-22014

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A heap use after free condition exists in the clipboard handling functionality. Specifically, the xf clipboard format equal function...

10CVSS5.3AI score0.00251EPSS
Exploits37References118
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-30222

Malicious code in bioql PyPI...

3.7CVSS6.4AI score0.00045EPSS
Exploits0References3
NVD
NVD
added 2025/09/18 11:15 p.m.1 views

CVE-2025-59691

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv6 traffic is no longer routed or blocked. In th...

3.7CVSS0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/07/25 12:53 p.m.1 views

CVE-2025-38376

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume Shawn and John reported a hang issue during system suspend as below: - USB gadget is enabled as Ethernet - There is data transfer over USB Ethernet scp a...

5.5CVSS6AI score0.00065EPSS
Exploits0References5Affected Software1
Fedora
Fedora
added 2025/06/25 1:19 a.m.3 views

[SECURITY] Fedora 42 Update: gotify-desktop-1.3.7-5.fc42

Small Gotify daemon to receive messages and forward them as desktop notificat ions. Read Gotify messages, and forward them as standard desktop notification . Forward message priority. Auto reconnect if server connection is lost and g et missed messages. Automatically download, cache, and show app...

8.8CVSS7.3AI score0.00151EPSS
Exploits1
Fedora
Fedora
added 2025/02/13 2:2 a.m.4 views

[SECURITY] Fedora 40 Update: gotify-desktop-1.3.7-4.fc40

Small Gotify daemon to receive messages and forward them as desktop notificat ions. Read Gotify messages, and forward them as standard desktop notification . Forward message priority. Auto reconnect if server connection is lost and g et missed messages. Automatically download, cache, and show app...

7.3AI score
Exploits0
Fedora
Fedora
added 2025/02/08 2:18 a.m.10 views

[SECURITY] Fedora 41 Update: gotify-desktop-1.3.7-4.fc41

Small Gotify daemon to receive messages and forward them as desktop notificat ions. Read Gotify messages, and forward them as standard desktop notification . Forward message priority. Auto reconnect if server connection is lost and g et missed messages. Automatically download, cache, and show app...

7.3AI score
Exploits0
Kitploit
Kitploit
added 2023/07/28 12:30 p.m.90 views

pyFUD - Multi Clients FUD Reverse Shell

python3 based multi clients reverse shell. Warning: 1. Don't Upload Any Payloads To VirusTotal.com Bcz This tool will not work with Time. 2. Virustotal Share Signatures With AV Comapnies. 3. Again Don't be an Idiot! Installation: 1. git clone https://github.com/machine1337/pyFUD 2. python3...

7.3AI score
Exploits0References2
OSV
OSV
added 2021/09/23 3:15 a.m.2 views

CVE-2021-1620

A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool. This vulnerability occurs because the cod...

7.7CVSS7.1AI score0.0033EPSS
Exploits0References1
Rows per page
Query Builder