CVE-2020-11019

CVE-2020-11019 FreeRDP 2.0.0 이하 버전에서 로거가 "WLOGTRACE"로 설정된 상태로 실행하면, 잘못된 배열 인덱스를 읽어 애플리케이션 충돌이 발생할 수 있습니다. 데이터가 로컬 터미널에 문자열로 출력될 수 있습니다. 이 문제는 2.1.0에서 수정되었습니다. 인증| 복잡성| 벡터 ---|---|--- SINGLE| LOW| NETWORK...

CVE-2021-41160

CVE-2021-41160 FreeRDP는 Apache 라이선스로 배포되는 Remote Desktop ProtocolRDP의 무료 구현체입니다. 영향을 받는 버전에서는 악성 서버가 연결된 클라이언트에서 경계를 벗어난 쓰기를 유발할 수 있습니다. GDI 또는 SurfaceCommands를 사용하여 클라이언트에 그래픽 업데이트를 전송하는 연결은 0 너비/높이 또는 경계를 벗어난 사각형을 전송하여 경계를 벗어난 쓰기를 유발할 수 있습니다. 0 너비 또는 높이의 경우 메모리 할당은 0이 되지만 경계 검사가 누락되어 할당되지 않은 이...

Oracle Linux 9 : ELSA-2026-61379-0: / freerdp (ELSA-2026-613790)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613790 advisory. 2:2.11.7-7.6 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225096, RHEL-227729,...

RLSA-2026:61378 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP...

RHSA-2026:61379 Red Hat Security Advisory: freerdp security update

Bulletin has no description...

RHSA-2026:61378 Red Hat Security Advisory: freerdp security update

Bulletin has no description...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

RLSA-2026:61379 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP...

RockyLinux 10 : freerdp (RLSA-2026:61378)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61378 advisory. FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses CVE-2026-67297 FreeRDP: FreeRDP: Memory disclosure or denial of service v...

RockyLinux 9 : freerdp (RLSA-2026:61379)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61379 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafted...

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2111)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2111 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicio...

FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses

A vulnerability in FreeRDP allows a malicious RD Gateway to bypass client-side size limits by sending oversized chunked HTTP responses. This exhausts the client's memory, resulting in a Denial of Service DoS...

FreeRDP: FreeRDP: Denial of Service via null pointer dereference in smartcard cleanup

A null pointer dereference flaw in FreeRDP allows a remote attacker to cause a denial of service DoS via specially crafted smartcard requests. If reader-state decoding fails, the system attempts to free uninitialized states during cleanup, resulting in a process crash...

FreeRDP: FreeRDP: Denial of Service and heap corruption via malformed RDP audio PDU

A flaw was found in FreeRDP. An authenticated Remote Desktop Protocol RDP client can send a specially crafted Client Audio Formats Protocol Data Unit PDU to the server. This malformed PDU can cause a double-free vulnerability in the rdpsndserverrecvformats function, leading to the server reliably...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing

A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol RDP Enhanced Input RDPEI server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory,...

FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure

A flaw was found in FreeRDP, an implementation of the Remote Desktop Protocol. A malicious RDP server can exploit an out-of-bounds read vulnerability by sending a malformed planar bitmap or surface update. This causes the client's decoder to read beyond its allocated buffer, which can lead to a...

FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling

A vulnerability in FreeRDP's server-side RDSTLS allows remote, unauthenticated attackers to bypass authentication. By sending a crafted capabilities PDU instead of the expected authentication request, an attacker can gain an authenticated session without valid credentials...

FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read

A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...