| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | < 3.32.2 | 3.32.2 |
FreeRDP before 3.32.2 contains a use-after-free vulnerability in the freerdp-proxy DRDYNVC tracker when intercepting the drdynvc channel. A malicious target server can repeatedly send CREATE_REQUEST_PDU for an active channel id, racing front DATA handling to free a borrowed context and crash the proxy process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free