https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:57:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11218 bdu:2026-11218 https://cve.radiocsirt.org/vuln/bdu:2026-11218 https://cve.radiocsirt.org/vuln/euvd-2026-348494 EUVD-2026-348494 https://cve.radiocsirt.org/vuln/euvd-2026-348494 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67293 <p>FreeRDP before 3.29.0 (affected versions &lt;= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL&#39;s X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.</p> <p>FreeRDP before 3.29.0 (affected versions &lt;= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL&#39;s X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-67293 https://cve.radiocsirt.org/vuln/ghsa-wc6m-wggm-hjr8 <p>FreeRDP before 3.29.0 (affected versions &lt;= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL&#39;s X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.</p> <p>FreeRDP before 3.29.0 (affected versions &lt;= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL&#39;s X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.</p> https://cve.radiocsirt.org/vuln/ghsa-wc6m-wggm-hjr8 https://cve.radiocsirt.org/vuln/oesa-2026-3641 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: freerdp</p> <p>FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft&amp;amp;apos;s open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fix(es):</p> <p>FreeRDP before 3.29.0 (affected versions &amp;lt;= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL&amp;apos;s X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.(CVE-2026-67293)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: freerdp</p> <p>FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft&amp;amp;apos;s open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fix(es):</p> <p>FreeRDP before 3.29.0 (affected versions &amp;lt;= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL&amp;apos;s X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.(CVE-2026-67293)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3641 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-67293 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:26.04:LTS: freerdp3</p> <p>FreeRDP before 3.29.0 (affected versions &lt;= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL&#39;s X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:26.04:LTS: freerdp3</p> <p>FreeRDP before 3.29.0 (affected versions &lt;= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL&#39;s X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-67293 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2384 <p>Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2384