Количество 8
Количество 8
GHSA-xq3v-xj62-r99v
FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.
CVE-2026-67296
FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.
CVE-2026-67296
FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.
CVE-2026-67296
FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server.
CVE-2026-67296
FreeRDP before 3.29.0 contains a denial of service vulnerability in th ...
BDU:2026-10986
Уязвимость функции rdpei_server_handle_messages() файла channels/rdpei/server/rdpei_main.c RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании
RLSA-2026:61378
Important: freerdp security update
ELSA-2026-61378-0
ELSA-2026-61378-0: freerdp security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xq3v-xj62-r99v FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server. | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-67296 FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server. | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-67296 FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-67296 FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory allocation on the server. | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-67296 FreeRDP before 3.29.0 contains a denial of service vulnerability in th ... | CVSS3: 7.5 | 0% Низкий | около 2 месяцев назад |
 | BDU:2026-10986 Уязвимость функции rdpei_server_handle_messages() файла channels/rdpei/server/rdpei_main.c RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | RLSA-2026:61378 Important: freerdp security update | 21 день назад | ||
| ELSA-2026-61378-0 ELSA-2026-61378-0: freerdp security update (IMPORTANT) | 22 дня назад |
Уязвимостей на страницу