Critical Remote Code Execution Vulnerability in FreeRDP Package
Summary
RLSA-2026:36203: Important: freerdp security update. Affects freerdp versions < 2:3.10.3-12.el10_2.6. Fixed in 2:3.10.3-12.el10_2.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), allowing users to connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. It is released under the Apache license and is widely used for remote desktop access. The package is essential for users needing secure and efficient remote connections, but it has recently been identified as vulnerable to several critical security issues.
Vulnerability Detail
The vulnerabilities in FreeRDP stem from multiple coding flaws, including heap-buffer-overflows, use-after-free errors, and out-of-bounds writes. These issues can lead to remote code execution, allowing attackers to execute arbitrary code on affected systems or cause denial of service. Specifically, the vulnerabilities are associated with the gdi_CacheToSurface function, the RDPEAR NDR parser, and the planar bitmap decoder, among others. The CVSS score for these vulnerabilities is 8.8, indicating a high severity level.
How To Fix
Minimum fixed version
2:3.10.3-12.el10_2.6
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, users are advised to limit access to the FreeRDP service and monitor for any unusual activity. Additionally, consider using firewall rules to restrict connections to trusted IP addresses only.
Conclusion
The vulnerabilities identified in FreeRDP pose significant risks, including remote code execution and denial of service. It is crucial for users to update to the latest patched version to mitigate these risks. Additionally, utilizing tools like Vulert can help monitor for vulnerabilities in real-time.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP), enabling users to connect to remote desktops securely.
The vulnerabilities can lead to remote code execution, allowing attackers to run arbitrary code on the affected systems, potentially compromising sensitive data.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
If you cannot update immediately, consider implementing firewall rules to restrict access and monitor for any suspicious activity on your system.
The CVSS score for the vulnerabilities in FreeRDP is 8.8, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
