Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-91959

Опубликовано: 16 сент. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.5

Описание

[GHSA-pj8w-fh79-f438: rts_read_result length-checks 2 bytes and then reads 4]

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

needs-triage

esm-infra-legacy/xenial

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/noble

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

jammy

DNE

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

EPSS

Процентиль: 28%
0.00346
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
4 дня назад

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.

CVSS3: 6.5
nvd
4 дня назад

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.

CVSS3: 6.5
debian
4 дня назад

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the ...

CVSS3: 6.5
github
4 дня назад

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort.

EPSS

Процентиль: 28%
0.00346
Низкий

6.5 Medium

CVSS3

Уязвимость CVE-2026-91959