Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using RPC-over-HTTP gateway transport. The assertion is active in default release builds (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2.
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using RPC-over-HTTP gateway transport. The assertion is active in default release builds (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2.
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using RPC-over-HTTP gateway transport. The assertion is active in default release builds (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2.
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ...
BDU:2026-04667
Уязвимость функции rts_read_auth_verifier_no_checks() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260615-80-0036
Уязвимость freerdp3
ROS-20260615-73-0035
Уязвимость freerdp3
ALT-PU-2026-6177
ALT-PU-2026-6177: package `freerdp3` update to version 3.24.2-alt1
SUSE-SU-2026:3562-1
Security update for freerdp
openSUSE-SU-2026:20657-1
Security update for freerdp
ALT-PU-2026-9838
ALT-PU-2026-9838: package `freerdp` update to version 2.11.8-alt0.p10.1
ALT-PU-2026-6926
ALT-PU-2026-6926: package `freerdp3` update to version 3.24.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-33952 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using RPC-over-HTTP gateway transport. The assertion is active in default release builds (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2. | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-33952 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using RPC-over-HTTP gateway transport. The assertion is active in default release builds (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2. | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-33952 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length field read from the network triggers a WINPR_ASSERT() failure in rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using RPC-over-HTTP gateway transport. The assertion is active in default release builds (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2. | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
| CVE-2026-33952 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior ... | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | BDU:2026-04667 Уязвимость функции rts_read_auth_verifier_no_checks() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | ROS-20260615-80-0036 Уязвимость freerdp3 | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
| ROS-20260615-73-0035 Уязвимость freerdp3 | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
| ALT-PU-2026-6177 ALT-PU-2026-6177: package `freerdp3` update to version 3.24.2-alt1 | CVSS3: 8.1 | 7 месяцев назад | |
 | SUSE-SU-2026:3562-1 Security update for freerdp | 3 месяца назад | ||
| openSUSE-SU-2026:20657-1 Security update for freerdp | 6 месяцев назад | ||
| ALT-PU-2026-9838 ALT-PU-2026-9838: package `freerdp` update to version 2.11.8-alt0.p10.1 | CVSS3: 9.8 | 5 месяцев назад | |
| ALT-PU-2026-6926 ALT-PU-2026-6926: package `freerdp3` update to version 3.24.2-alt1 | CVSS3: 9.8 | 6 месяцев назад |
Уязвимостей на страницу