Поиск уязвимостей
Количество 7
Количество 7
GHSA-26v7-mr7m-fqqx
FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect.
CVE-2026-121404
FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect.
CVE-2026-121404
FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect.
CVE-2026-121404
FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect.
CVE-2026-121404
FreeRDP before 3.32.2 contains a denial of service vulnerability in th ...
RLSA-2026:94514
Important: freerdp security, bug fix, and enhancement update
ALT-PU-2026-18990
ALT-PU-2026-18990: package `freerdp3` update to version 3.32.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-26v7-mr7m-fqqx FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect. | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
 | CVE-2026-121404 FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect. | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
 | CVE-2026-121404 FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect. | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
 | CVE-2026-121404 FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect. | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
| CVE-2026-121404 FreeRDP before 3.32.2 contains a denial of service vulnerability in th ... | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
 | RLSA-2026:94514 Important: freerdp security, bug fix, and enhancement update | 5 дней назад | ||
| ALT-PU-2026-18990 ALT-PU-2026-18990: package `freerdp3` update to version 3.32.2-alt1 | CVSS3: 7.5 | 17 дней назад |
Уязвимостей на страницу