USN-8105-2
freerdp3 regression
USN-8105-1 fixed vulnerabilities in FreeRDP. The update introduced a regression which could cause FreeRDP to crash. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.
What each source reports
OSV No score
freerdp3 regression
USN-8105-1 fixed vulnerabilities in FreeRDP. The update introduced a regression which could cause FreeRDP to crash. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-8105-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freerdp3Ubuntu:24.04:LTS |
before 3.5.1+dfsg1-0ubuntu1.5, plus listed versions 3.4.0+dfsg1-0ubuntu23.4.0+dfsg1-0ubuntu33.4.0+dfsg1-0ubuntu43.5.0+dfsg1-0ubuntu13.5.1+dfsg1-0ubuntu13.5.1+dfsg1-0ubuntu1.13.5.1+dfsg1-0ubuntu1.23.5.1+dfsg1-0ubuntu1.4 |
3.5.1+dfsg1-0ubuntu1.5 |
freerdp3Ubuntu:25.10 |
before 3.16.0+dfsg-2ubuntu0.4, plus listed versions 3.14.0+dfsg-1ubuntu13.15.0+dfsg-2.13.16.0+dfsg-1ubuntu13.16.0+dfsg-23.16.0+dfsg-2ubuntu0.13.16.0+dfsg-2ubuntu0.3 |
3.16.0+dfsg-2ubuntu0.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8105-2 is a vulnerability with no CVSS score yet in freerdp3, published March 19, 2026. No source lists public exploit code. Fixed in freerdp3 3.5.1+dfsg1-0ubuntu1.5.