Search CVE reports
61 – 70 of 350 results
Some fixes available 2 of 8
FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request unadvertised camera media types. Attackers can send a StartStreamsRequest with oversized...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers are sized from one input component rather than three BGR output...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is written by http_proxy_connect into the CONNECT request line...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRP_MJ_READ or IRP_MJ_WRITE before...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |
Some fixes available 2 of 8
FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memory allocations. Attackers can send a...
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| freerdp | Not in release | Not in release | Not in release | — | Needs evaluation |
| freerdp2 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| freerdp3 | Fixed | Fixed | Not in release | — | — |