FreeRDP

FreeRDP : une implémentation du protocole de bureau à distance FreeRDP est une implémentation libre du protocole Remote Desktop Protocol RDP, publiée sous licence Apache. Profitez de la liberté d'utiliser votre logiciel où vous voulez, comme vous le voulez, dans un monde où l'interopérabilité peu...

BKScan

BKScan Scanner BlueKeep CVE-2019-0708 fonctionnant à la fois sans authentification et avec authentification c'est-à-dire lorsque l'authentification au niveau du réseau NLA est activée. Prérequis : Un serveur RDP Windows Si NLA est activé sur le serveur RDP, un utilisateur/mot de passe valide...

nlahoney

NLA Honeypot: связанные исследования FreeRDP-ResearchServer/: модифицированный FreeRDP 2.2.0, который завершает рукопожатие RDP, выгоняет пользователя поскольку учётные записи не настроены и сохраняет шесть сообщений в /tmp FreeRDP-Pot-Patches/: патчи для сервера FreeRDP, предназначенного для...

CVE-2020-11097-POC

crasher FreeRDP en utilisant le POC CVE-2020-11097 démarrer le serveur avec python3 test.py se connecter au serveur avec la commande suivante xfreerdp /v:127.0.0.1:3389 /u:user /p:pass /gt:127.0.0.1 /log-level:DEBUG...

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- La vulnérabilité FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 est une faille de sécurité découverte dans FreeRDP, un programme open-source utilisé pour implémenter le Remote Desktop Protocol RDP Cette vulnérabilité provient de faiblesses dans le traitement...

CVE-2020-11019

CVE-2020-11019 Dans FreeRDP version 2.0.0 ou antérieure, lorsque le logger est réglé sur "WLOGTRACE", un possible crash de l'application peut se produire en raison d'une lecture d'un index de tableau invalide. Les données peuvent être affichées sous forme de chaîne sur le terminal local. Cela a é...

FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...

FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...

FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the URBDRC USB device redirection channel. By sending a specially crafted message, the server can cause the FreeRDP client to read beyond its allocated memory, leading to...

FreeRDP: FreeRDP: Heap buffer overflow via oversized LB_LOAD_BALANCE_INFO routing token can lead to heap corruption.

A flaw was found in FreeRDP. A malicious RDP Remote Desktop Protocol server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU Protocol Data Unit with an...

FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RLSA-2026:76747 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

RockyLinux 8 : freerdp (RLSA-2026:76747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76747 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...

freerdp security update

2:2.11.7-7.8 - Backport several CVE fixes CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, CVE-2026-91964 Resolves: RHEL-260758, RHEL-260785, RHEL-260803, RHEL-260849, RHEL-260871 Resolves: RHEL-260902...

AlmaLinux 8 : freerdp (ALSA-2026:76747)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:76747 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...

Rocky Linux 10.2 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_75570)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202675570 advisory. FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU CVE-2026-85089 FreeRDP: FreeRDP: Denial ...

Oracle Linux 8 : freerdp (ELSA-2026-76747)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76747 advisory. 2:2.11.7-14 - Backport several CVE fixes CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, CVE-2026-91964 Resolves:...