Поиск уязвимостей
Количество 11
Количество 11
GHSA-98x3-97xw-cfqr
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.
CVE-2026-111880
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.
CVE-2026-111880
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.
CVE-2026-111880
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.
CVE-2026-111880
FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds ...
RLSA-2026:94510
Important: freerdp security update
RLSA-2026:93592
Important: freerdp security update
ELSA-2026-94510
ELSA-2026-94510: freerdp security update (IMPORTANT)
ELSA-2026-93592
ELSA-2026-93592: freerdp security update (IMPORTANT)
ELSA-2026-94514
ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:94514
Important: freerdp security, bug fix, and enhancement update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-98x3-97xw-cfqr FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation. | CVSS3: 7.4 | 0% Низкий | 22 дня назад |
 | CVE-2026-111880 FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation. | CVSS3: 7.4 | 0% Низкий | 23 дня назад |
 | CVE-2026-111880 FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation. | CVSS3: 7.4 | 0% Низкий | 23 дня назад |
 | CVE-2026-111880 FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation. | CVSS3: 7.4 | 0% Низкий | 23 дня назад |
| CVE-2026-111880 FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds ... | CVSS3: 7.4 | 0% Низкий | 23 дня назад |
 | RLSA-2026:94510 Important: freerdp security update | 5 дней назад | ||
| RLSA-2026:93592 Important: freerdp security update | 6 дней назад | ||
| ELSA-2026-94510 ELSA-2026-94510: freerdp security update (IMPORTANT) | 6 дней назад | ||
| ELSA-2026-93592 ELSA-2026-93592: freerdp security update (IMPORTANT) | 7 дней назад | ||
| ELSA-2026-94514 ELSA-2026-94514: freerdp security, bug fix, and enhancement update (IMPORTANT) | 6 дней назад | ||
| RLSA-2026:94514 Important: freerdp security, bug fix, and enhancement update | 5 дней назад |
Уязвимостей на страницу