Lucene search
K

16 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions, there is a Global-Buffer-Overflow in the ncrushdecompress function. Feeding crafted input into this function can trigger the overflow, which has only been shown to cause a...

7.5CVSS7AI score0.0022EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2024/11/12 9:36 a.m.4 views

freerdp: out-of-bounds read in ncrush_decompress

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available...

9.8CVSS5.8AI score0.10619EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/04/24 12:0 a.m.1 views

Vulnerability of the ncrush_decompress() function in the RDP client of FreeRDP, allowing a hacker to execute arbitrary code

The vulnerability of the ncrushdecompress function in the RDP client of FreeRDP is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS8.2AI score0.10619EPSS
Exploits0References15Affected Software5
Cvelist
Cvelist
added 2024/04/22 9:32 p.m.12 views

CVE-2024-32459 FreeRDP Out-Of-Bounds Read in ncrush_decompress

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available...

9.8CVSS9.7AI score0.10619EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2024/04/22 9:32 p.m.19 views

CVE-2024-32459

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available...

9.8CVSS9.7AI score0.10619EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/04/22 9:32 p.m.13 views

CVE-2024-32459 FreeRDP Out-Of-Bounds Read in ncrush_decompress

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are available...

9.8CVSS6.8AI score0.10619EPSS
Exploits0References8
Veracode
Veracode
added 2023/09/06 2:35 a.m.25 views

Buffer Overflow

libfreerdp.so is vulnerable to Buffer Overflow. The vulnerability exists due to the global buffer overflow in the ncrushdecompress function of ncrush.c because it does not properly verify offsets while decoding data, which allows an attacker to cause an application crash by providing a maliciousl...

7.5CVSS7.2AI score0.0022EPSS
Exploits1References8Affected Software1
RedhatCVE
RedhatCVE
added 2023/09/05 3:14 p.m.33 views

CVE-2023-40589

A flaw was found in the FreeRDP implementation. Feeding crafted input into the ncrushdecompress function may cause a buffer overflow, resulting in a crash...

7.5CVSS7.8AI score0.0022EPSS
Exploits1References5
CNVD
CNVD
added 2023/09/05 12:0 a.m.25 views

FreeRDP Buffer Overflow Vulnerability (CNVD-2023-72250)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates from a boundary error in the ncrushdecompress function when handling untrusted input. A remote attacker could exploit the...

5CVSS8.2AI score0.0022EPSS
Exploits1Affected Software1
AlpineLinux
AlpineLinux
added 2023/08/31 7:15 p.m.27 views

CVE-2023-40589

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrushdecompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a...

7.5CVSS7.2AI score0.0022EPSS
Exploits1
OSV
OSV
added 2023/08/31 7:15 p.m.2 views

DEBIAN-CVE-2023-40589

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrushdecompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a...

7.5CVSS6.7AI score0.0022EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2023/08/31 7:15 p.m.18 views

CVE-2023-40589

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrushdecompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a...

7.5CVSS6.7AI score0.0022EPSS
Exploits1References4
Prion
Prion
added 2023/08/31 7:15 p.m.21 views

Buffer overflow

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrushdecompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a...

5CVSS7.8AI score0.0022EPSS
Exploits1References7Affected Software3
OSV
OSV
added 2023/08/31 6:31 p.m.28 views

CVE-2023-40589 FreeRDP Global-Buffer-Overflow in ncrush_decompress

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrushdecompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a...

4.3CVSS7.1AI score0.0022EPSS
Exploits1References10
Cvelist
Cvelist
added 2023/08/31 6:31 p.m.19 views

CVE-2023-40589 FreeRDP Global-Buffer-Overflow in ncrush_decompress

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrushdecompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a...

4.3CVSS8.8AI score0.0022EPSS
Exploits1References7
CNNVD
CNNVD
added 2023/08/31 12:0 a.m.1 views

FreeRDP 安全漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that originates from a boundary error in the ncrushdecompress function when handling untrusted input. A remote attacker could exploit the...

7.5CVSS8.1AI score0.0022EPSS
Exploits1References10
Rows per page
Query Builder