Vulnerabilities in FreeRDP

211 results
Vexday analysis

Com 147 CVEs catalogadas, o FreeRDP apresenta um volume considerável de vulnerabilidades históricas, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, sem registros no CISA KEV. O tipo de falha predominante é CWE-125 (leitura fora dos limites de buffer), padrão recorrente em clientes de protocolo remoto e que pode facilitar vazamento de dados ou instabilidade da aplicação. O CVE de maior atenção no momento é CVE-2024-32459, com score EPSS de 0,0375, e a existência de 2 CVEs com PoC pública exige monitoramento contínuo por parte de equipes de resposta. O ritmo de 15 novas CVEs nos últimos 90 dias indica superfície de ataque em expansão ativa, reforçando a necessidade de ciclos de atualização frequentes em ambientes que utilizam esta solução de desktop remoto.

CVE-2023-39352MEDIUMInvalid offset validation leading to Out Of Bound Write in FreeRDPEPSS 1.5%CVE-2020-11049MEDIUMOut-of-bounds Read in FreeRDPrdp_read_share_control_headerEPSS 1.5%CVE-2023-40567MEDIUMOut-Of-Bounds Write in FreeRDPEPSS 1.5%CVE-2023-39353MEDIUMMissing offset validation leading to Out Of Bound Read in FreeRDPEPSS 1.5%CVE-2023-40188MEDIUMOut-Of-Bounds Read in FreeRDPEPSS 1.5%CVE-2020-15103LOWInteger Overflow in FreeRDPEPSS 1.5%CVE-2020-11088LOWOut-of-bound read in FreeRDPEPSS 1.5%CVE-2017-2835HIGHAn exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted seEPSS 1.5%CVE-2020-11095LOWGlobal OOB read in update_recv_primary_order in FreeRDPEPSS 1.5%CVE-2020-11086LOWOut-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`EPSS 1.4%CVE-2020-11087LOWOut-of-bounds Read in FreeRDPEPSS 1.4%CVE-2020-11097LOWOOB read in ntlm_av_pair_get in FreeRDPEPSS 1.4%CVE-2021-41159MEDIUMImproper client input validation for FreeRDP gateway connections allows to overwrite memoryEPSS 1.4%CVE-2024-32658CRITICALFreeRDP ExtractRunLengthRegular* out of bound readEPSS 1.4%CVE-2023-40186MEDIUMIntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDPEPSS 1.4%CVE-2020-11038MEDIUMInteger Overflow to Buffer Overflow in FreeRDPEPSS 1.3%CVE-2020-11046MEDIUMImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPEPSS 1.3%CVE-2023-40569MEDIUMOut-Of-Bounds Write in FreeRDPEPSS 1.3%CVE-2023-40589MEDIUMFreeRDP Global-Buffer-Overflow in ncrush_decompressEPSS 1.3%CVE-2023-40575MEDIUMOut-Of-Bounds Read in FreeRDPEPSS 1.3%