libwinpr-devel vulnerabilities (AlmaLinux)
122 vulnerabilities.
-
libwinpr-develAlmaLinux FreeRDP before 3.32.2 Shadow Server CPU Exhaustion via Zero-Length DVC DATA 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.32.2 Denial of Service via RemoteFX RLGR decoder 7.1 High -
libwinpr-develAlmaLinux FreeRDP 3.0.0 before 3.32.2 Uncapped Memory Allocation via DRDYNVC DATA_FIRST 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.32.2 Denial of Service via WinPR PNG/JPEG Image Readers 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format 8.7 High -
libwinpr-develAlmaLinux FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset 8.3 High -
libwinpr-develAlmaLinux FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 Parser 7.0 High -
libwinpr-develAlmaLinux FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3 7.0 High -
libwinpr-develAlmaLinux FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser 8.7 High -
libwinpr-develAlmaLinux FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data 7.1 High -
libwinpr-develAlmaLinux FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass 8.7 High -
libwinpr-develAlmaLinux FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding 6.1 Medium -
libwinpr-develAlmaLinux FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy 8.2 High -
libwinpr-develAlmaLinux FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE 8.2 High -
libwinpr-develAlmaLinux FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade 7.1 High -
libwinpr-develAlmaLinux FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken 8.7 High -
libwinpr-develAlmaLinux FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.31.0 Integer Overflow Double Free 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound 7.1 High -
libwinpr-develAlmaLinux FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass 9.2 Critical -
libwinpr-develAlmaLinux FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC 7.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics 7.1 High -
libwinpr-develAlmaLinux FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory 7.1 High -
libwinpr-develAlmaLinux FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`) 8.3 High -
libwinpr-develAlmaLinux FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage` 8.3 High -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel 7.7 High -
libwinpr-develAlmaLinux Important: freerdp security update 5.4 Medium -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message 8.7 High -
libwinpr-develAlmaLinux FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 Denial of Service via smartcard cache 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 Denial of Service via RDPEI PDU 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection 9.3 Critical -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy 8.7 High -
libwinpr-develAlmaLinux FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response 8.7 High -
libwinpr-develAlmaLinux FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU 7.1 High -
libwinpr-develAlmaLinux FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client 7.7 High -
libwinpr-develAlmaLinux FreeRDP RDP File Parser Remote Code Execution via CLI Options 8.5 High -
libwinpr-develAlmaLinux FreeRDP before 3.28.0 Double-Free via selectedmonitors 9.3 Critical -
libwinpr-develAlmaLinux FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common 9.3 Critical -
libwinpr-develAlmaLinux FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode 7.5 High -
libwinpr-develAlmaLinux FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch 8.7 High - Show olderLoading…