Описание
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.
EPSS
6.5 Medium
CVSS3
Дефекты
Связанные уязвимости
[GHSA-pj8w-fh79-f438: rts_read_result length-checks 2 bytes and then reads 4]
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the ...
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.
EPSS
6.5 Medium
CVSS3