{"id":"CVE-2021-41160","aliases":["ALPINE-CVE-2021-41160","ALSA-2021:4622","DEBIAN-CVE-2021-41160","DLA-3654-1","DLA-4053-1","EUVD-2021-28270","GHSA-7c9r-6r2q-93qg","MGASA-2021-0522","OESA-2021-1424","RHSA-2021:4619","RHSA-2021:4620","RHSA-2021:4621","RHSA-2021:4622","RHSA-2021:4623","RLSA-2021:4622","SUSE-SU-2022:2993-1","UBUNTU-CVE-2021-41160","USN-5154-1","openSUSE-SU-2024:11591-1"],"status":"published","title":"Improper region checks in FreeRDP allow out of bound write to memory","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01662,"percentile":0.77038,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2021-10-21T00:00:00Z","modified":"2026-11-03T06:31:46Z","exploits":[{"source":"pocgithub","id":"Jajangjaman/CVE-2021-41160","title":"Jajangjaman/CVE-2021-41160","date":"2022-12-28","url":"https://github.com/Jajangjaman/CVE-2021-41160"}],"fixes":[{"ecosystem":"Alpine:v3.15","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freerdp","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freerdp2","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freerdp2","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freerdp2","fixed_in":["2.4.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freerdp2","fixed_in":["2.4.1+dfsg1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"freerdp","fixed_in":["2.4.1-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"freerdp","fixed_in":["2.4.1-1.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","fixed_in":["2.2.0+dfsg1-0ubuntu0.18.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","fixed_in":["2.2.0+dfsg1-0ubuntu0.20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"freerdp2","fixed_in":["2.3.0+dfsg1-2ubuntu2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0+dfsg1-2+deb10u4"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-1+deb10u1","2.0.0~git20190204.1.2693389a+dfsg1-1+deb10u2","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2~bpo10+1","2.1.1+dfsg1-1","2.1.2+dfsg1-1","2.1.2+dfsg1-2","2.2.0+dfsg1-1","2.2.0+dfsg1-1~bpo10+1","2.3.0+dfsg1-1","2.3.0+dfsg1-1~bpo10+1","2.3.0+dfsg1-2","2.3.0+dfsg1-2+deb10u3"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0+dfsg1-2+deb11u2"}]}],"versions":["2.3.0+dfsg1-2","2.3.0+dfsg1-2+deb11u1"],"bundled":32},{"source":"osv","ecosystem":"Mageia:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1.1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-1.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.0-46.rc4.el8_2.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"freerdp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"libwinpr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"libwinpr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"freerdp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"freerdp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"freerdp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"freerdp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"libwinpr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-6.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.0-7.el8_5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150400.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3","1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.18.04.2"}]}],"versions":["2.0.0~git20170725.1.1648deb+dfsg1-1","2.0.0~git20170725.1.1648deb+dfsg1-5","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2","2.0.0~git20170725.1.1648deb+dfsg1-6","2.0.0~git20170725.1.1648deb+dfsg1-6build1","2.0.0~git20170725.1.1648deb+dfsg1-7","2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1","2.1.1+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1","1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1","1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.20.04.2"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2build1","2.0.0~git20190204.1.2693389a+dfsg1-2build2","2.1.1+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0+dfsg1-2ubuntu2"}]}],"versions":["2.3.0+dfsg1-2build1","2.3.0+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.18.04.2"}]}],"versions":["2.0.0~git20170725.1.1648deb+dfsg1-1","2.0.0~git20170725.1.1648deb+dfsg1-5","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1","2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2","2.0.0~git20170725.1.1648deb+dfsg1-6","2.0.0~git20170725.1.1648deb+dfsg1-6build1","2.0.0~git20170725.1.1648deb+dfsg1-7","2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1","2.1.1+dfsg1-0ubuntu0.18.04.1","2.2.0+dfsg1-0ubuntu0.18.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0+dfsg1-0ubuntu0.20.04.2"}]}],"versions":["2.0.0~git20190204.1.2693389a+dfsg1-1","2.0.0~git20190204.1.2693389a+dfsg1-2","2.0.0~git20190204.1.2693389a+dfsg1-2build1","2.0.0~git20190204.1.2693389a+dfsg1-2build2","2.1.1+dfsg1-0ubuntu0.20.04.1","2.2.0+dfsg1-0ubuntu0.20.04.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"freerdp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-1.1"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freerdp","product":"freerdp"}],"references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7c9r-6r2q-93qg","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWJXQOWKNR7O5HM2HFJOM4GBUFPTE3RG/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCR73EDVPLI6TRWRAWJCJ7OBYDKBB74/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WIZUPVRGCWUDAPDOQVUGUIYUO7UWKMXX/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202210-24","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-41160","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-4622.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-41159","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-41160","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41160","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0522.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29654","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4622","tags":["web","advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1424","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41160","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4619","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016412","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4619.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41159","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41160","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4620","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4620.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4621","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4621.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4622.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4623","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4623.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4622","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222993-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191895","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41160","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-41160","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5154-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-41159","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-41160","title":"Improper region checks in FreeRDP allow out of bound write to memory","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.","status":"published","published":"2021-10-21T00:00:00Z","modified":"2025-11-03T20:33:53.998Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-28270","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.","status":"published","published":"2021-10-21T00:00:00Z","modified":"2025-11-03T20:33:53Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:32.503916Z"}],"nvd":[{"id":"CVE-2021-41160","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.","status":"published","published":"2021-10-21T19:15:07.947Z","modified":"2026-06-17T04:07:59.8Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:00.137719Z"}],"osv":[{"id":"ALPINE-CVE-2021-41160","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.","status":"published","published":"2021-10-21T19:15:07.947Z","modified":"2026-11-03T06:31:46.819315322Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2021-41160","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.","status":"published","published":"2021-10-21T19:15:07.947Z","modified":"2026-10-20T14:08:53.238481915Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-41160","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.","status":"published","published":"2021-10-21T19:15:07.947Z","modified":"2026-10-23T18:03:38.358646272Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2021-1424","title":"freerdp security update","description":"FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft\u0026apos;s open specifications. This package provides the client applications xfreerdp and wlfreerdp.\r\n\r\nSecurity Fix(es):\r\n\r\nFreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.(CVE-2021-41160)","status":"published","published":"2021-11-09T11:04:41Z","modified":"2026-08-18T01:16:04.874140905Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4619","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T06:49:04Z","modified":"2026-06-26T12:21:17.407809048Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4620","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T06:49:11Z","modified":"2026-06-26T12:21:17.11084953Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4621","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T06:48:57Z","modified":"2026-06-26T12:22:17.837567303Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4622","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T06:48:50Z","modified":"2026-06-26T12:21:17.01748302Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:4623","title":"Red Hat Security Advisory: freerdp security update","status":"published","published":"2024-09-16T06:49:18Z","modified":"2026-06-26T12:21:17.342154633Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2021:4622","title":"Important: freerdp security update","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: improper client input validation for gateway connections allows to overwrite memory (CVE-2021-41159)\n\n* freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-11-11T09:34:33Z","modified":"2026-02-04T13:30:08.18648Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-41160","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.","status":"published","published":"2021-10-21T19:15:00Z","modified":"2026-04-22T13:01:20.623101Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2021:4622","title":"Important: freerdp security update","description":"FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.\n\nSecurity Fix(es):\n\n* freerdp: improper client input validation for gateway connections allows to overwrite memory (CVE-2021-41159)\n\n* freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-11-11T09:34:33Z","modified":"2026-10-29T11:01:11.331018937Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-3654-1","title":"freerdp2 - security update","status":"published","published":"2023-11-17T00:00:00Z","modified":"2026-03-09T01:20:39.038402Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4053-1","title":"freerdp2 - security update","status":"published","published":"2025-02-15T00:00:00Z","modified":"2026-03-09T01:19:24.57066Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2021-0522","title":"Updated freerdp packages fix security vulnerability","description":"All FreeRDP clients prior to version 2.4.1 using gateway connections\n('/gt:rpc') fail to validate input data. A malicious gateway might allow\nclient memory to be written out of bounds. This issue has been resolved in\nversion 2.4.1. If you are unable to update then use `/gt:http` rather than\n/gt:rdp connections if possible or use a direct connection without a\ngateway. (CVE-2021-41159)\n\nIn affected versions a malicious server might trigger out of bound writes\nin a connected client. Connections using GDI or SurfaceCommands to send\ngraphics updates to the client might send `0` width/height or out of bound\nrectangles to trigger out of bound writes. With `0` width or heigth the\nmemory allocation will be `0` but the missing bounds checks allow writing\nto the pointer at this (not allocated) region. This issue has been patched\nin FreeRDP 2.4.1. (CVE-2021-41160)\n","status":"published","published":"2021-11-25T13:06:13Z","modified":"2026-04-16T04:43:33.659496092Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11591-1","title":"freerdp-2.4.1-1.1 on GA media","description":"These are all security issues fixed in the freerdp-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:19:29.077324Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:2993-1","title":"Security update for freerdp","description":"This update for freerdp fixes the following issues:\n\n- Fixed two input validation issues (bsc#1191895):\n  - CVE-2021-41159: Fixed an improper validation of client input for gateway connections.\n  - CVE-2021-41160: Fixed improper region checks that could lead to memory corruption.\n","status":"published","published":"2022-09-02T07:49:24Z","modified":"2026-02-04T02:24:28.69255Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5154-1","title":"freerdp2 vulnerabilities","description":"It was discovered that FreeRDP incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code\nor cause a crash. (CVE-2021-41159)\n\nIt was discovered that FreeRDP incorrectly handled certain connections.\nAn attacker could possibly use this issue to execute arbitrary code or\ncause a crash. (CVE-2021-41160)\n","status":"published","published":"2021-11-23T14:40:45Z","modified":"2026-04-27T15:59:35.430279Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}