freerdp Vulnerability Advisory Catalog

Total 177 security vulnerabilities recorded for freerdp software and firmware.

← Back to All Vendors
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing o...

📅 2023-08-31
CVSS 5.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid ...

📅 2023-08-31
CVSS 5.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branc...

📅 2023-08-31
CVSS 7.0 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-B...

📅 2023-08-31
CVSS 5.9 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to ...

📅 2023-08-31
CVSS 5.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer und...

📅 2023-08-31
CVSS 5.9 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffe...

📅 2023-08-31
CVSS 4.3 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channe...

📅 2022-11-16
CVSS 4.6 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malici...

📅 2022-11-16
CVSS 4.8 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX d...

📅 2022-11-16
CVSS 4.6 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A ...

📅 2022-11-16
CVSS 4.6 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for ...

📅 2022-11-16
CVSS 2.6 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to ...

📅 2022-11-16
CVSS 5.5 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP...

📅 2022-11-16
CVSS 4.8 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninit...

📅 2022-10-12
CVSS 5.9 Dossier →
Component: freerdp

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read ...

📅 2022-10-12
CVSS 3.5 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might b...

📅 2022-04-26
CVSS 7.4 Dossier →
CVE-2022-24882 CRITICAL
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not prope...

📅 2022-04-26
CVSS 9.1 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server migh...

📅 2021-10-21
CVSS 5.3 Dossier →
Component: freerdp

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 u...

📅 2021-10-21
CVSS 5.8 Dossier →
CVE-2021-37595 CRITICAL
Component: freerdp

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS...

📅 2021-07-30
CVSS 9.8 Dossier →
CVE-2021-37594 CRITICAL
Component: freerdp

In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS...

📅 2021-07-30
CVSS 9.8 Dossier →
Component: freerdp

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affecte...

📅 2020-07-27
CVSS 3.5 Dossier →
Component: freerdp

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are af...

📅 2020-06-22
CVSS 3.1 Dossier →
Page 5 of 8 (177 Total Records)