https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:30:15.747823+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1849 ALSA-2021:1849 — Moderate: freerdp security, bug fix, and enhancement update 2026-10-03T18:30:15.915407+00:00

Affected: AlmaLinux:8: freerdp-devel

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

The following packages have been upgraded to a later upstream version: freerdp (2.2.0). (BZ#1881971)

Security Fix(es):

* freerdp: out of bounds read in TrioParse (CVE-2020-4030)

* freerdp: out of bound reads resulting in accessing memory location outside of static array PRIMARY_DRAWING_ORDER_FIELD_BYTES (CVE-2020-11095)

* freerdp: out of bounds read in PRIMARY_DRAWING_ORDER_FIELD_BYTES (CVE-2020-11097)

* freerdp: out of bounds read in license_read_new_or_upgrade_license_packet (CVE-2020-11099)

* freerdp: integer overflow due to missing input sanitation in rdpegfx channel (CVE-2020-15103)

* freerdp: out-of-bounds read in RLEDECOMPRESS (CVE-2020-4033)

* freerdp: out-of-bound read in update_read_cache_bitmap_v3_order (CVE-2020-11096)

* freerdp: out-of-bound read in glyph_cache_put (CVE-2020-11098)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-01354 bdu:2021-01354 2026-10-03T18:30:15.915487+00:00 bdu:2021-01354 https://cve.radiocsirt.org/vuln/cleanstart-2024-gn67261 CLEANSTART-2024-GN67261 — In FreeRDP before version 2 2026-10-03T18:30:15.915506+00:00

Affected: CleanStart: freerdp

Security vulnerability affects the freerdp package. In FreeRDP before version 2.

 https://cve.radiocsirt.org/vuln/cnvd-2020-35692 cnvd-2020-35692 2026-10-03T18:30:15.915529+00:00 cnvd-2020-35692 https://cve.radiocsirt.org/vuln/euvd-2026-40291 EUVD-2026-40291 2026-10-03T18:30:15.915543+00:00 EUVD-2026-40291 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11098 fkie_cve-2020-11098 2026-10-03T18:30:15.915554+00:00

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.

 https://cve.radiocsirt.org/vuln/gsd-2020-11098 gsd-2020-11098 2026-10-03T18:30:15.915576+00:00 gsd-2020-11098 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1090-1 openSUSE-SU-2020:1090-1 — Security update for freerdp 2026-10-03T18:30:15.915587+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/suse-su-2020:2032-1 SUSE-SU-2020:2032-1 — Security update for freerdp 2026-10-03T18:30:15.915624+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11098 UBUNTU-CVE-2020-11098 2026-10-03T18:30:15.915657+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:20.04:LTS: freerdp2

In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2644 WID-SEC-W-2026-2644 — Red Hat Enterprise Linux (FreeRDP): Mehrere Schwachstellen 2026-10-03T18:30:15.915681+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.