Freerdp

Freerdp

157 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-39282

  • EPSS 0.19%
  • Veröffentlicht 12.10.2022 23:15:09
  • Zuletzt bearbeitet 03.11.2025 21:15:52

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based ser...

7.5

CVE-2022-39283

  • EPSS 0.21%
  • Veröffentlicht 12.10.2022 23:15:09
  • Zuletzt bearbeitet 03.11.2025 21:15:52

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations ...

7.5

CVE-2022-24882

Exploit
  • EPSS 1.11%
  • Veröffentlicht 26.04.2022 16:15:47
  • Zuletzt bearbeitet 03.11.2025 21:15:51

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Serve...

9.8

CVE-2022-24883

  • EPSS 0.98%
  • Veröffentlicht 26.04.2022 16:15:47
  • Zuletzt bearbeitet 03.11.2025 21:15:51

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRD...

8.8

CVE-2021-41159

  • EPSS 0.32%
  • Veröffentlicht 21.10.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 06:25:37

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input data. A malicious gateway might allow cl...

8.8

CVE-2021-41160

  • EPSS 0.12%
  • Veröffentlicht 21.10.2021 19:15:07
  • Zuletzt bearbeitet 03.11.2025 21:15:42

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to sen...

9.8

CVE-2021-37594

  • EPSS 0.42%
  • Veröffentlicht 30.07.2021 14:15:18
  • Zuletzt bearbeitet 21.11.2024 06:15:29

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request PDU.

9.8

CVE-2021-37595

  • EPSS 0.42%
  • Veröffentlicht 30.07.2021 14:15:18
  • Zuletzt bearbeitet 21.11.2024 06:15:29

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request PDU.

3.5

CVE-2020-15103

  • EPSS 0.26%
  • Veröffentlicht 27.07.2020 18:15:13
  • Zuletzt bearbeitet 21.11.2024 05:04:48

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindl...

6.5

CVE-2020-4030

  • EPSS 0.04%
  • Veröffentlicht 22.06.2020 22:15:13
  • Zuletzt bearbeitet 21.11.2024 05:32:11

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.