Critical Security Update for FreeRDP: Heap Buffer Overflow and DoS Vulnerabilities
Summary
ALSA-2026:8945: Important: freerdp security update. Affects freerdp versions < 2:2.11.7-7.el8_10. Fixed in 2:2.11.7-7.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), allowing users to connect to remote servers and desktops. It is widely used for accessing Windows machines, xrdp, and VirtualBox environments. The package includes various components such as the xfreerdp client, which is essential for establishing RDP connections. However, recent vulnerabilities have been identified that could compromise the security of systems utilizing FreeRDP.
Vulnerability Detail
The vulnerabilities in FreeRDP include a heap buffer overflow that allows for arbitrary code execution through crafted pixel data (CVE-2026-33984) and a denial of service (DoS) attack via specially crafted RDP messages (CVE-2026-33983). These vulnerabilities can lead to unauthorized access and system crashes, posing significant risks to users and organizations relying on FreeRDP for remote desktop access.
How To Fix
Minimum fixed version
2:2.11.7-7.el8_10
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to limit access to FreeRDP services and monitor network traffic for any suspicious activity until the update can be applied. Additionally, consider using firewall rules to restrict incoming RDP connections.
Conclusion
The identified vulnerabilities in FreeRDP pose significant risks, including potential arbitrary code execution and denial of service. It is crucial for users to update their installations to the latest patched version to mitigate these risks. Utilizing tools like Vulert can help monitor for such vulnerabilities effectively.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP) that allows users to connect to remote desktops and servers.
The vulnerabilities include a heap buffer overflow that can lead to arbitrary code execution and a denial of service (DoS) attack through specially crafted RDP messages.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit Vulert Scanner to check your application without requiring signup.
If an immediate update is not possible, limit access to FreeRDP services and monitor for any unusual activity as a temporary measure.
For more details, refer to the CVE pages linked in the security advisory or consult the FreeRDP documentation.
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
