Lucene search
K

16 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/20 12:0 a.m.5 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021645 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthreadstop may prevent the threadfn from eve...

5.5CVSS5.8AI score0.00063EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007209 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by...

9.8CVSS5.8AI score0.0011EPSS
Exploits1References4
OSV
OSV
added 2026/03/06 12:42 p.m.1 views

OESA-2026-1519 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: A malicious server can trigger a client-side heap buffer overflow, causing a crash DoS and potential heap...

9.8CVSS6.4AI score0.00251EPSS
Exploits18References28
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.4 views

SUSE SLES12 Security Update : freerdp (SUSE-SU-2026:0762-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0762-1 advisory. - CVE-2026-22855: heap-buffer-overflow in smartcardunpacksetattribcall bsc1256721. - CVE-2026-22857: heap-use-after-free in irpthreadfunc...

9.8CVSS6.2AI score0.00251EPSS
Exploits5References34
SUSE Linux
SUSE Linux
added 2026/03/03 12:40 p.m.3 views

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-22855: heap-buffer-overflow in smartcardunpacksetattribcall bsc1256721. CVE-2026-22857: heap-use-after-free in irpthreadfunc bsc1256723. CVE-2026-23533: improper validation can lead to heap buffer overflow in cleardecompressresidualdata...

7.7CVSS6.1AI score0.00251EPSS
Exploits6References24
NVD
NVD
added 2026/01/14 6:16 p.m.4 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS0.0011EPSS
Exploits1References2
OSV
OSV
added 2026/01/14 6:16 p.m.0 views

UBUNTU-CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS5.8AI score0.0011EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2026/01/14 6:16 p.m.2 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS5.9AI score0.0011EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/14 5:53 p.m.2 views

CVE-2026-22857 FreeRDP has a heap-use-after-free in irp_thread_func

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

7.7CVSS6.5AI score0.0011EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/01/14 5:53 p.m.3 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS5.5AI score0.0011EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2026/01/14 5:53 p.m.2 views

CVE-2026-22857

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

9.8CVSS7AI score0.0011EPSS
Exploits1
Cvelist
Cvelist
added 2026/01/14 5:53 p.m.17 views

CVE-2026-22857 FreeRDP has a heap-use-after-free in irp_thread_func

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

7.7CVSS0.0011EPSS
Exploits1References2
OSV
OSV
added 2026/01/14 5:53 p.m.1 views

CVE-2026-22857 FreeRDP has a heap-use-after-free in irp_thread_func

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a heap use-after-free occurs in irpthreadfunc because the IRP is freed by irp-Complete and then accessed again on the error path. This vulnerability is fixed in 3.20.1...

7.7CVSS5.9AI score0.0011EPSS
Exploits1References4
CVE
CVE
added 2026/01/14 5:53 p.m.11 views

CVE-2026-22857

CVE-2026-22857 affects FreeRDP’s irp_thread_func, where a heap use-after-free occurs because the IRP is freed by irp->Complete() and then accessed again on the error path. The description specifies this is fixed in FreeRDP 3.20.1. Connected advisories for multiple distributions (e.g., SUSE/Ope...

9.8CVSS6.5AI score0.0011EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.4 views

FreeRDP 资源管理错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. A resource management error vulnerability exists in FreeRDP versions prior to 3.20.1, which originates in irpthreadfunc, where the IRP is released by irp-Complete and then accessed on the wrong path,...

9.8CVSS7.3AI score0.0011EPSS
Exploits1References4
NVD
NVD
added 2010/11/30 9:38 p.m.16 views

CVE-2010-4248

Race condition in the exitsignal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader...

4.9CVSS5.8AI score0.00037EPSS
Exploits2References15
Rows per page
Query Builder