Поиск уязвимостей
Количество 7
Количество 7
CVE-2026-121388
FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATA_FIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing StreamPool_Take to reserve memory before body validation and exhaust client memory.
CVE-2026-121388
FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATA_FIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing StreamPool_Take to reserve memory before body validation and exhaust client memory.
CVE-2026-121388
FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATA_FIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing StreamPool_Take to reserve memory before body validation and exhaust client memory.
CVE-2026-121388
FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource all ...
GHSA-vrcq-2593-3p64
FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATA_FIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing StreamPool_Take to reserve memory before body validation and exhaust client memory.
RLSA-2026:94514
Important: freerdp security, bug fix, and enhancement update
ALT-PU-2026-18990
ALT-PU-2026-18990: package `freerdp3` update to version 3.32.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-121388 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATA_FIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing StreamPool_Take to reserve memory before body validation and exhaust client memory. | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
 | CVE-2026-121388 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATA_FIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing StreamPool_Take to reserve memory before body validation and exhaust client memory. | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
 | CVE-2026-121388 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATA_FIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing StreamPool_Take to reserve memory before body validation and exhaust client memory. | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
| CVE-2026-121388 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource all ... | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
| GHSA-vrcq-2593-3p64 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to force large client allocations through the DRDYNVC DATA_FIRST Length field. Attackers can declare lengths up to 4,294,967,295 bytes on running dynamic channels, causing StreamPool_Take to reserve memory before body validation and exhaust client memory. | CVSS3: 6.5 | 0% Низкий | 6 дней назад |
 | RLSA-2026:94514 Important: freerdp security, bug fix, and enhancement update | 5 дней назад | ||
| ALT-PU-2026-18990 ALT-PU-2026-18990: package `freerdp3` update to version 3.32.2-alt1 | CVSS3: 7.5 | 17 дней назад |
Уязвимостей на страницу