FreeRDP before 3.32.2 CPU Exhaustion via RDG Control Packet

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a malicious RD Gateway to exhaust client CPU by sending an incomplete keepalive control packet. Attackers completing the RDG tunnel-open exchange then send an eight-byte header with packetLength 0xFFFF and withhold the body, causing an unbounded no-progress read loop that spins one client thread at full CPU.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…reeRDP/security/advisories/GHSA-x4x6-2hrm-hvq9 Üretici bülteni
• vulncheck.com/…e-3.32.2-cpu-exhaustion-via-rdg-control-packet Üçüncü taraf

Kayıt geçmişi

1. 3 Kas 2026 17:28Yayımlandı

İlgili açıklar

• 7,5 CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment
• 5,9 CVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close
• 8,1 CVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read
• 5,9 CVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race
• 6,5 CVE-2026-121959FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
• 7,5 CVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest