Поиск уязвимостей
Количество 15
Количество 15
CVE-2026-91953
FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes.
CVE-2026-91953
FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes.
CVE-2026-91953
FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes.
CVE-2026-91953
FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerab ...
ROS-20261020-80-0079
Уязвимость freerdp3
ROS-20261020-80-0078
Уязвимость freerdp
ROS-20261020-73-0080
Уязвимость freerdp3
GHSA-5mm3-24pm-34qv
FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes.
RLSA-2026:76755
Important: freerdp security update
RLSA-2026:76747
Important: freerdp security update
ELSA-2026-76755
ELSA-2026-76755: freerdp security update (IMPORTANT)
ELSA-2026-76747
ELSA-2026-76747: freerdp security update (IMPORTANT)
RLSA-2026:75570
Important: freerdp security update
ELSA-2026-75570
ELSA-2026-75570: freerdp security update (IMPORTANT)
ALT-PU-2026-15108
ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-91953 FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-91953 FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-91953 FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-91953 FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerab ... | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | ROS-20261020-80-0079 Уязвимость freerdp3 | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
| ROS-20261020-80-0078 Уязвимость freerdp | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
| ROS-20261020-73-0080 Уязвимость freerdp3 | CVSS3: 7.5 | 0% Низкий | 20 дней назад |
| GHSA-5mm3-24pm-34qv FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an oversized LB_LOAD_BALANCE_INFO value to overflow the buffer with attacker-controlled content, causing denial of service or heap corruption before authentication completes. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | RLSA-2026:76755 Important: freerdp security update | около 1 месяца назад | ||
| RLSA-2026:76747 Important: freerdp security update | около 1 месяца назад | ||
| ELSA-2026-76755 ELSA-2026-76755: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| ELSA-2026-76747 ELSA-2026-76747: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| RLSA-2026:75570 Important: freerdp security update | около 1 месяца назад | ||
| ELSA-2026-75570 ELSA-2026-75570: freerdp security update (IMPORTANT) | около 1 месяца назад | ||
| ALT-PU-2026-15108 ALT-PU-2026-15108: package `freerdp3` update to version 3.31.1-alt1 | CVSS3: 9.3 | около 2 месяцев назад |
Уязвимостей на страницу