Freerdp

freerdp

189 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (189)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-2838 2Debian Freerdp 2Debian Linux Freerdp Nov 21, 2024 Apr 24, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial...Show more An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.Show less
CVE-2017-2837 2Debian Freerdp 2Debian Linux Freerdp Nov 21, 2024 Apr 24, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of s...Show more An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.Show less
CVE-2017-2836 2Debian Freerdp 2Debian Linux Freerdp Nov 21, 2024 Apr 24, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading...Show more An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.Show less
CVE-2017-2835 2Debian Freerdp 2Debian Linux Freerdp Nov 21, 2024 Apr 24, 2018 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condi...Show more An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.Show less
CVE-2017-2834 2Debian Freerdp 2Debian Linux Freerdp Nov 21, 2024 Apr 24, 2018 N/A· v4 7.0 HIGH· v3 6.8 MEDIUM· v2 An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable co...Show more An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.Show less
CVE-2013-4119 1Freerdp 1Freerdp May 6, 2026 Oct 3, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by disconnecting before authentication has finished.
CVE-2013-4118 2Freerdp Opensuse 3Freerdp LeapOpensuse May 6, 2026 Oct 3, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
CVE-2014-0250 2Freerdp Opensuse 2Freerdp Opensuse May 6, 2026 Nov 16, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes...Show more Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.Show less
CVE-2014-0791 1Freerdp 1Freerdp Apr 29, 2026 Jan 3, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other...Show more Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.Show less

Previous 1...6 7 8 910