Freerdp

Freerdp

239 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.7

CVE-2022-39347

  • EPSS 0.9%
  • Veröffentlicht 16.11.2022 20:15:10
  • Zuletzt bearbeitet 03.11.2025 21:15:53

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the share...

4.6

CVE-2022-41877

  • EPSS 0.73%
  • Veröffentlicht 16.11.2022 20:15:10
  • Zuletzt bearbeitet 03.11.2025 21:15:54

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the ...

7.5

CVE-2022-39282

  • EPSS 0.89%
  • Veröffentlicht 12.10.2022 23:15:09
  • Zuletzt bearbeitet 03.11.2025 21:15:52

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based ser...

7.5

CVE-2022-39283

  • EPSS 1.08%
  • Veröffentlicht 12.10.2022 23:15:09
  • Zuletzt bearbeitet 03.11.2025 21:15:52

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations ...

7.5

CVE-2022-24882

Exploit
  • EPSS 2.75%
  • Veröffentlicht 26.04.2022 16:15:47
  • Zuletzt bearbeitet 03.11.2025 21:15:51

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Serve...

9.8

CVE-2022-24883

  • EPSS 2.27%
  • Veröffentlicht 26.04.2022 16:15:47
  • Zuletzt bearbeitet 03.11.2025 21:15:51

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRD...

8.8

CVE-2021-41159

  • EPSS 1.39%
  • Veröffentlicht 21.10.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 06:25:37

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input data. A malicious gateway might allow cl...

8.8

CVE-2021-41160

  • EPSS 1.67%
  • Veröffentlicht 21.10.2021 19:15:07
  • Zuletzt bearbeitet 03.11.2025 21:15:42

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to sen...

9.8

CVE-2021-37594

  • EPSS 1.41%
  • Veröffentlicht 30.07.2021 14:15:18
  • Zuletzt bearbeitet 21.11.2024 06:15:29

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request PDU.

9.8

CVE-2021-37595

  • EPSS 1.52%
  • Veröffentlicht 30.07.2021 14:15:18
  • Zuletzt bearbeitet 21.11.2024 06:15:29

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request PDU.