Vulnerabilities > Freerdp

DATE CVE VULNERABILITY TITLE RISK
2021-10-21 CVE-2021-41160 Out-of-bounds Write vulnerability in multiple products
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
network
low complexity
freerdp fedoraproject CWE-787
8.8
8.8
2021-07-30 CVE-2021-37594 Improper Input Validation vulnerability in Freerdp
In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request PDU.
network
low complexity
freerdp CWE-20
critical
 9.8
9.8
2021-07-30 CVE-2021-37595 Improper Input Validation vulnerability in Freerdp
In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request PDU.
network
low complexity
freerdp CWE-20
critical
 9.8
9.8
2020-07-27 CVE-2020-15103 In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel.
network
low complexity
freerdp fedoraproject opensuse canonical debian
3.5
3.5
2020-06-22 CVE-2020-4033 In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS.
network
low complexity
freerdp fedoraproject opensuse canonical debian
6.5
6.5
2020-06-22 CVE-2020-4032 In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order.
network
low complexity
freerdp opensuse fedoraproject canonical debian
4.3
4.3
2020-06-22 CVE-2020-4031 In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject.
network
low complexity
freerdp fedoraproject opensuse canonical debian
7.5
7.5
2020-06-22 CVE-2020-4030 In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse.
network
low complexity
freerdp fedoraproject opensuse canonical debian
6.5
6.5
2020-06-22 CVE-2020-11099 In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet.
network
low complexity
freerdp opensuse fedoraproject canonical debian
6.5
6.5
2020-06-22 CVE-2020-11098 In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put.
network
low complexity
freerdp fedoraproject opensuse canonical debian
6.5
6.5