Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xq3v-xj62-r99v

Опубликовано: 01 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.

EPSS

Процентиль: 27%
0.00343
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
nvd
2 дня назад

FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.

CVSS3: 7.5
debian
2 дня назад

FreeRDP before 3.29.0 contains a denial of service vulnerability in th ...

EPSS

Процентиль: 27%
0.00343
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-20