https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:23:09.977033+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4647 ALSA-2020:4647 — Moderate: freerdp and vinagre security, bug fix, and enhancement update 2026-10-03T22:23:09.997346+00:00

Affected: AlmaLinux:8: freerdp-devel, AlmaLinux:8: vinagre

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop.

The following packages have been upgraded to a later upstream version: freerdp (2.1.1). (BZ#1834287)

Security Fix(es):

* freerdp: Out of bound read in cliprdr_server_receive_capabilities (CVE-2020-11018)

* freerdp: Out of bound read/write in usb redirection channel (CVE-2020-11039)

* freerdp: out-of-bounds read in update_read_icon_info function (CVE-2020-11042)

* freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function (CVE-2020-11047)

* freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396)

* freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c (CVE-2020-13397)

* freerdp: Out of bound read in update_recv could result in a crash (CVE-2020-11019)

* freerdp: Integer overflow in VIDEO channel (CVE-2020-11038)

* freerdp: Out of bound access in clear_decompress_subcode_rlex (CVE-2020-11040)

* freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu (CVE-2020-11041)

* freerdp: out of bound read in rfx_process_message_tileset (CVE-2020-11043)

* freerdp: double free in update_read_cache_bitmap_v3_order function (CVE-2020-11044)

* freerdp: out of bound…

 https://cve.radiocsirt.org/vuln/bdu:2020-02591 bdu:2020-02591 2026-10-03T22:23:09.997455+00:00 bdu:2020-02591 https://cve.radiocsirt.org/vuln/cnvd-2020-31430 cnvd-2020-31430 2026-10-03T22:23:09.997473+00:00 cnvd-2020-31430 https://cve.radiocsirt.org/vuln/euvd-2026-40266 EUVD-2026-40266 2026-10-03T22:23:09.997486+00:00 EUVD-2026-40266 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11019 fkie_cve-2020-11019 2026-10-03T22:23:09.997496+00:00

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.

 https://cve.radiocsirt.org/vuln/gsd-2020-11019 gsd-2020-11019 2026-10-03T22:23:09.997519+00:00 gsd-2020-11019 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1090-1 openSUSE-SU-2020:1090-1 — Security update for freerdp 2026-10-03T22:23:09.997529+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/suse-su-2020:2032-1 SUSE-SU-2020:2032-1 — Security update for freerdp 2026-10-03T22:23:09.997562+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11019 UBUNTU-CVE-2020-11019 2026-10-03T22:23:09.997591+00:00

Affected: Ubuntu:18.04:LTS: freerdp2, Ubuntu:20.04:LTS: freerdp2

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.