Freerdp

Freerdp

103 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.7

CVE-2022-39318

  • EPSS 0.11%
  • Published 16.11.2022 21:15:10
  • Last modified 21.11.2024 07:18:01

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addr...

4.6

CVE-2022-39319

  • EPSS 0.07%
  • Published 16.11.2022 21:15:10
  • Last modified 21.11.2024 07:18:01

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to...

5.7

CVE-2022-39316

  • EPSS 0.11%
  • Published 16.11.2022 20:15:10
  • Last modified 21.11.2024 07:18:01

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it...

4.6

CVE-2022-39320

  • EPSS 0.04%
  • Published 16.11.2022 20:15:10
  • Last modified 21.11.2024 07:18:01

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP ba...

5.7

CVE-2022-39347

  • EPSS 0.11%
  • Published 16.11.2022 20:15:10
  • Last modified 21.11.2024 07:18:05

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the share...

4.6

CVE-2022-41877

  • EPSS 0.08%
  • Published 16.11.2022 20:15:10
  • Last modified 21.11.2024 07:23:58

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the ...

7.5

CVE-2022-39282

  • EPSS 0.08%
  • Published 12.10.2022 23:15:09
  • Last modified 21.11.2024 07:17:57

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based ser...

7.5

CVE-2022-39283

  • EPSS 0.09%
  • Published 12.10.2022 23:15:09
  • Last modified 21.11.2024 07:17:57

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations ...

7.5

CVE-2022-24882

Exploit
  • EPSS 0.2%
  • Published 26.04.2022 16:15:47
  • Last modified 21.11.2024 06:51:18

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Serve...

9.8

CVE-2022-24883

  • EPSS 0.83%
  • Published 26.04.2022 16:15:47
  • Last modified 21.11.2024 06:51:18

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRD...