FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocket_context_read that fails to handle a zero BIO result with payload outstanding. A malicious RD Gateway can send a truncated WebSocket frame followed by a TLS close_notify, causing a client thread to spin and consume CPU until killed.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…reeRDP/security/advisories/GHSA-x26g-fp9v-c2pg Üretici bülteni
• vulncheck.com/….2-infinite-loop-via-truncated-websocket-frame Üçüncü taraf

Kayıt geçmişi

1. 4 Kas 2026 18:33Yayımlandı

İlgili açıklar

• 7,5 CVE-2026-121964FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment
• 5,9 CVE-2026-121963FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close
• 8,1 CVE-2026-121962FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read
• 5,9 CVE-2026-121961FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race
• 7,5 CVE-2026-121960FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest
• 8,8 CVE-2026-121958FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys