https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:35:33.850675+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4647 ALSA-2020:4647 — Moderate: freerdp and vinagre security, bug fix, and enhancement update 2026-10-03T21:35:33.961266+00:00

Affected: AlmaLinux:8: freerdp-devel, AlmaLinux:8: vinagre

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop.

The following packages have been upgraded to a later upstream version: freerdp (2.1.1). (BZ#1834287)

Security Fix(es):

* freerdp: Out of bound read in cliprdr_server_receive_capabilities (CVE-2020-11018)

* freerdp: Out of bound read/write in usb redirection channel (CVE-2020-11039)

* freerdp: out-of-bounds read in update_read_icon_info function (CVE-2020-11042)

* freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function (CVE-2020-11047)

* freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396)

* freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c (CVE-2020-13397)

* freerdp: Out of bound read in update_recv could result in a crash (CVE-2020-11019)

* freerdp: Integer overflow in VIDEO channel (CVE-2020-11038)

* freerdp: Out of bound access in clear_decompress_subcode_rlex (CVE-2020-11040)

* freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu (CVE-2020-11041)

* freerdp: out of bound read in rfx_process_message_tileset (CVE-2020-11043)

* freerdp: double free in update_read_cache_bitmap_v3_order function (CVE-2020-11044)

* freerdp: out of bound…

 https://cve.radiocsirt.org/vuln/bdu:2021-00498 bdu:2021-00498 2026-10-03T21:35:33.961355+00:00 bdu:2021-00498 https://cve.radiocsirt.org/vuln/cnvd-2020-31440 cnvd-2020-31440 2026-10-03T21:35:33.961382+00:00 cnvd-2020-31440 https://cve.radiocsirt.org/vuln/euvd-2026-40327 EUVD-2026-40327 2026-10-03T21:35:33.961395+00:00 EUVD-2026-40327 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11089 fkie_cve-2020-11089 2026-10-03T21:35:33.961406+00:00

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.

 https://cve.radiocsirt.org/vuln/gsd-2020-11089 gsd-2020-11089 2026-10-03T21:35:33.961429+00:00 gsd-2020-11089 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1090-1 openSUSE-SU-2020:1090-1 — Security update for freerdp 2026-10-03T21:35:33.961440+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/suse-su-2020:2032-1 SUSE-SU-2020:2032-1 — Security update for freerdp 2026-10-03T21:35:33.961475+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11089 UBUNTU-CVE-2020-11089 2026-10-03T21:35:33.961505+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:20.04:LTS: freerdp2

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.