| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | < 3.30.0 | 3.30.0 |
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP peer to trigger out-of-bounds reads and in-place writes during CredSSP/NLA Kerberos decryption. This issue is fixed in version 3.30.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free