Freerdp

Freerdp

103 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2023-40181

Exploit
  • EPSS 0.07%
  • Published 31.08.2023 22:15:07
  • Last modified 21.11.2024 08:18:56

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. In the context of ...

9.1

CVE-2023-39353

Exploit
  • EPSS 0.05%
  • Published 31.08.2023 21:15:08
  • Last modified 21.11.2024 08:15:13

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the `libfreerdp/codec/rfx.c` file there is no offs...

9.1

CVE-2023-39356

Exploit
  • EPSS 0.15%
  • Published 31.08.2023 21:15:08
  • Last modified 10.04.2025 21:05:20

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function `gdi_multi_opaque_rect`. In particular there i...

9.8

CVE-2023-39352

Exploit
  • EPSS 0.09%
  • Published 31.08.2023 21:15:07
  • Last modified 11.04.2025 14:48:41

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values `rect->left` ...

7.5

CVE-2023-39350

Exploit
  • EPSS 0.31%
  • Published 31.08.2023 20:15:08
  • Last modified 10.04.2025 20:51:24

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS (e.g. abort due to `WINPR_ASSERT` with default compilation flags). When an ins...

7.5

CVE-2023-39351

Exploit
  • EPSS 0.1%
  • Published 31.08.2023 20:15:08
  • Last modified 21.11.2024 08:15:12

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `rfx_process_...

7.5

CVE-2023-39354

Exploit
  • EPSS 0.18%
  • Published 31.08.2023 20:15:08
  • Last modified 21.11.2024 08:15:13

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `nsc_rle_decompress_data` function. The Out-Of-Bounds Read occurs because it proce...

9.8

CVE-2023-39355

Exploit
  • EPSS 0.28%
  • Published 31.08.2023 20:15:08
  • Last modified 21.11.2024 08:15:13

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before beta3 are subject to a Use-After-Free in processing `RDPGFX_CMDID_RESETGRAPHICS` packets. I...

7.5

CVE-2023-40589

Exploit
  • EPSS 0.1%
  • Published 31.08.2023 19:15:11
  • Last modified 21.11.2024 08:19:46

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function can trigger t...

4.6

CVE-2022-39317

  • EPSS 0.06%
  • Published 16.11.2022 21:15:10
  • Last modified 21.11.2024 07:18:01

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to dec...