Moderate Security Vulnerability in FreeRDP: Denial of Service and Information Disclosure Risks
Summary
RLSA-2026:16014: Moderate: freerdp security update. Affects freerdp versions < 2:3.10.3-5.el10_1.8. Fixed in 2:3.10.3-5.el10_1.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), allowing users to connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. It is released under the Apache license and is widely used for remote desktop access. The package is known for its flexibility and compatibility with various RDP servers, making it a popular choice among users seeking remote access solutions.
Vulnerability Detail
The vulnerabilities in FreeRDP include multiple denial of service (DoS) issues and potential information disclosure risks. Key vulnerabilities include a heap use-after-free during auto-reconnect, a double free vulnerability during disconnect, and a heap-buffer-overflow in bitmap cache handling. These vulnerabilities can lead to application crashes, memory corruption, and unauthorized access to sensitive information. The vulnerabilities stem from improper memory management and lack of bounds checks in the code, which can be exploited by attackers to disrupt service or gain access to confidential data.
How To Fix
Minimum fixed version
2:3.10.3-5.el10_1.8
This is the first release that contains the fix.
sudo dnf update freerdpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the FreeRDP client and avoid using features that may trigger the vulnerabilities, such as auto-reconnect and specific audio data handling. However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
The vulnerabilities in FreeRDP pose significant risks, including denial of service and potential information disclosure. It is crucial for users to update to the latest patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for freerdp →
FAQ
FreeRDP is an open-source implementation of the Remote Desktop Protocol (RDP) that allows users to connect to remote desktops.
The vulnerabilities include denial of service, heap use-after-free, double free, heap-buffer-overflow, and information disclosure issues.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without any signup.
The CVSS score of this vulnerability is 7.8, indicating a moderate level of risk.
You can update FreeRDP by running the command 'sudo yum update freerdp' in your terminal.
References
Related vulnerabilities
Recent vulnerabilities recorded for freerdp.
