Vulnerabilidades em FreeRDP

178 resultados
Análise Vexday

Com 147 CVEs catalogadas, o FreeRDP apresenta um volume considerável de vulnerabilidades históricas, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, sem registros no CISA KEV. O tipo de falha predominante é CWE-125 (leitura fora dos limites de buffer), padrão recorrente em clientes de protocolo remoto e que pode facilitar vazamento de dados ou instabilidade da aplicação. O CVE de maior atenção no momento é CVE-2024-32459, com score EPSS de 0,0375, e a existência de 2 CVEs com PoC pública exige monitoramento contínuo por parte de equipes de resposta. O ritmo de 15 novas CVEs nos últimos 90 dias indica superfície de ataque em expansão ativa, reforçando a necessidade de ciclos de atualização frequentes em ambientes que utilizam esta solução de desktop remoto.

CVE-2024-32459CRITICALFreeRDP Out-Of-Bounds Read in ncrush_decompressEPSS 3.8%CVE-2026-44420HIGHFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPSEPSS 3.7%CVE-2022-24882CRITICALServer side NTLM does not properly check parameters in FreeRDPEPSS 2.8%CVE-2020-11019MEDIUMOut of bound read in update_recv in FreeRDPEPSS 2.5%CVE-2024-32039CRITICALFreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_dataEPSS 2.3%CVE-2022-24883HIGHFreeRDP Server authentication might allow invalid credentials to passEPSS 2.3%CVE-2020-11099LOWOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPEPSS 2.1%CVE-2024-32458CRITICALFreeRDP Out-Of-Bounds Read in planar_skip_plane_rleEPSS 2.0%CVE-2024-32041CRITICALFreeRDP OutOfBound Read in zgfx_decompress_segmentEPSS 1.9%CVE-2024-32040HIGHFreeRDP vulnerable to integer underflow in nsc_rle_decodeEPSS 1.9%CVE-2024-32460HIGHFreeRDP Out-Of-Bounds Read in interleaved_decompressEPSS 1.9%CVE-2020-11043LOWOut-of-bounds Read in FreeRDPEPSS 1.9%CVE-2020-11018MEDIUMOut of bound read in cliprdr_server_receive_capabilities in FreeRDPEPSS 1.9%CVE-2020-11044LOWDouble Free in FreeRDPEPSS 1.9%CVE-2020-11048LOWOut-of-bounds Read in FreeRDPrdp_read_flow_control_pduEPSS 1.8%CVE-2020-4030LOWOOB read in `TrioParse` in FreeRDPEPSS 1.8%CVE-2020-11017MEDIUMDouble free in cliprdr_server_receive_capabilities in FreeRDPEPSS 1.8%CVE-2020-4032LOWInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPEPSS 1.8%CVE-2020-4033LOWOOB Read in RLEDECOMPRESS in FreeRDPEPSS 1.8%CVE-2020-11096LOWGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDPEPSS 1.8%