| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | < 3.29.0 | 3.29.0 |
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering the configured size limit.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free