| Package | Affected versions | Patched versions |
|---|---|---|
| freerdp | ≥ 2.0.0, < 3.32.0 | 3.32.0 |
FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static virtual channel message, withhold the LAST flag, and send endless fragments to exhaust server memory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free