https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:23:03.503264+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4647 ALSA-2020:4647 — Moderate: freerdp and vinagre security, bug fix, and enhancement update 2026-10-03T22:23:03.588189+00:00

Affected: AlmaLinux:8: freerdp-devel, AlmaLinux:8: vinagre

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop.

The following packages have been upgraded to a later upstream version: freerdp (2.1.1). (BZ#1834287)

Security Fix(es):

* freerdp: Out of bound read in cliprdr_server_receive_capabilities (CVE-2020-11018)

* freerdp: Out of bound read/write in usb redirection channel (CVE-2020-11039)

* freerdp: out-of-bounds read in update_read_icon_info function (CVE-2020-11042)

* freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function (CVE-2020-11047)

* freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396)

* freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c (CVE-2020-13397)

* freerdp: Out of bound read in update_recv could result in a crash (CVE-2020-11019)

* freerdp: Integer overflow in VIDEO channel (CVE-2020-11038)

* freerdp: Out of bound access in clear_decompress_subcode_rlex (CVE-2020-11040)

* freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu (CVE-2020-11041)

* freerdp: out of bound read in rfx_process_message_tileset (CVE-2020-11043)

* freerdp: double free in update_read_cache_bitmap_v3_order function (CVE-2020-11044)

* freerdp: out of bound…

 https://cve.radiocsirt.org/vuln/bdu:2020-02587 bdu:2020-02587 2026-10-03T22:23:03.588286+00:00 bdu:2020-02587 https://cve.radiocsirt.org/vuln/cnvd-2020-31431 cnvd-2020-31431 2026-10-03T22:23:03.588304+00:00 cnvd-2020-31431 https://cve.radiocsirt.org/vuln/euvd-2026-40355 EUVD-2026-40355 2026-10-03T22:23:03.588339+00:00 EUVD-2026-40355 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11038 fkie_cve-2020-11038 2026-10-03T22:23:03.588363+00:00

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.

 https://cve.radiocsirt.org/vuln/gsd-2020-11038 gsd-2020-11038 2026-10-03T22:23:03.588386+00:00 gsd-2020-11038 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1090-1 openSUSE-SU-2020:1090-1 — Security update for freerdp 2026-10-03T22:23:03.588397+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/suse-su-2020:2032-1 SUSE-SU-2020:2032-1 — Security update for freerdp 2026-10-03T22:23:03.588430+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11038 UBUNTU-CVE-2020-11038 2026-10-03T22:23:03.588461+00:00

Affected: Ubuntu:18.04:LTS: freerdp2, Ubuntu:20.04:LTS: freerdp2

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.