{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-111880: fix heap out-of-bounds write in NTLM MIC computation;\n validate the MIC offset against the AUTHENTICATE_MESSAGE length\n- CVE-2023-39354: fix out-of-bounds read in nsc_rle_decompress_data;\n check that the stream holds the declared plane lengths\n- CVE-2026-109244: winpr-makecert: create key and certificate files with\n owner-only permissions and use a random export password\n- CVE-2026-109257: NSCodec encoder: free plane buffers in one place to\n avoid a double free\n- CVE-2026-109677: smartcard: validate cbAtr against the rgbAtr size when\n unpacking LocateCardsByATR and reader states\n- CVE-2026-111377: server: abort static channel reassembly when fragments\n exceed the declared total size", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/advisories/2026/clsa-2026_1792964332.json" } ], "tracking": { "current_release_date": "2026-10-28T16:46:43Z", "generator": { "date": "2026-10-28T16:46:43Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792964332", "initial_release_date": "2026-10-25T21:38:53Z", "revision_history": [ { "date": "2026-10-25T21:38:53Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-28T16:46:43Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "freerdp: Fix of 6 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CloudLinux 7", "product": { "name": "CloudLinux 7", "product_id": "CloudLinux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "CloudLinux" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-libs@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr-devel@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } }, { "category": "product_version", "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_id": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-devel@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-libs@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr-devel@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libwinpr@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } }, { "category": "product_version", "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_id": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/freerdp-devel@2.1.1-5.0.9.el7_9.tuxcare.els8?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" }, "product_reference": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686 as a component of CloudLinux 7", "product_id": "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686" }, "product_reference": "freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "CloudLinux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-111377", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static virtual channel message, withhold the LAST flag, and send endless fragments to exhaust server memory.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-111377" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xm53-352c-57jw", "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xm53-352c-57jw" }, { "category": "external", "summary": "https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-memory-exhaustion-via-static-channel-reassembly", "url": "https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-memory-exhaustion-via-static-channel-reassembly" } ], "release_date": "2026-10-16T03:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T21:38:53.857747Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332", "product_ids": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-109677", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to defeat ASLR and aid RCE exploits.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-109677" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/commit/ececc5cbd0646ef012ca178322e6ef922a11f0c1", "url": "https://github.com/FreeRDP/FreeRDP/commit/ececc5cbd0646ef012ca178322e6ef922a11f0c1" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8m97-wwx3-r8vj", "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8m97-wwx3-r8vj" }, { "category": "external", "summary": "https://www.vulncheck.com/advisories/freerdp-2.0.0-beta1-before-3.28.0-out-of-bounds-read-via-locatecardsbyatra-handler", "url": "https://www.vulncheck.com/advisories/freerdp-2.0.0-beta1-before-3.28.0-out-of-bounds-read-via-locatecardsbyatra-handler" } ], "release_date": "2026-10-13T14:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T21:38:53.857747Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332", "product_ids": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-109244", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on multi-user Unix hosts can read world-readable key files or open PFX files protected by the hard-coded default password to steal private keys.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-109244" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2jfv-j3wx-5cg4", "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2jfv-j3wx-5cg4" }, { "category": "external", "summary": "https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-insecure-private-key-permissions-in-winpr-makecert", "url": "https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-insecure-private-key-permissions-in-winpr-makecert" } ], "release_date": "2026-10-12T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T21:38:53.857747Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332", "product_ids": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-39354", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the `nsc_rle_decompress_data` function. The Out-Of-Bounds Read occurs because it processes `context->Planes` without checking if it contains data of sufficient length. Should an attacker be able to leverage this vulnerability they may be able to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this vulnerability.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-39354" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/commit/cd1da25a87358eb3b5512fd259310e95b19a05ec", "url": "https://github.com/FreeRDP/FreeRDP/commit/cd1da25a87358eb3b5512fd259310e95b19a05ec" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c3r2-pxxp-f8r6", "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c3r2-pxxp-f8r6" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6LLDAPEXRDJOM3PREDDD267SSNT77DP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6LLDAPEXRDJOM3PREDDD267SSNT77DP/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHMTGKCZXJPQOR5ZD2I4GPDNP2DKRXMF/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHMTGKCZXJPQOR5ZD2I4GPDNP2DKRXMF/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OH2ATH2BKDNKCJAU4WPPXK4SHLE3UJUV/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202401-16", "url": "https://security.gentoo.org/glsa/202401-16" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html", "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00016.html" } ], "release_date": "2023-08-31T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T21:38:53.857747Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332", "product_ids": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-109257", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the server during context teardown.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-109257" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2hhg-8xx6-v73w", "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2hhg-8xx6-v73w" }, { "category": "external", "summary": "https://www.vulncheck.com/advisories/freerdp-before-3.32.0-double-free-via-nscodec-plane-growth-failure", "url": "https://www.vulncheck.com/advisories/freerdp-before-3.32.0-double-free-via-nscodec-plane-growth-failure" } ], "release_date": "2026-10-12T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T21:38:53.857747Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332", "product_ids": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-111880", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond the allocation.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-111880" }, { "category": "external", "summary": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cmgx-558f-vh67", "url": "https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cmgx-558f-vh67" }, { "category": "external", "summary": "https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-heap-out-of-bounds-write-via-ntlm-mic-offset", "url": "https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-heap-out-of-bounds-write-via-ntlm-mic-offset" } ], "release_date": "2026-10-17T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-25T21:38:53.857747Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332", "product_ids": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792964332" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:freerdp-libs-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.i686", "CloudLinux-7:libwinpr-devel-0:2.1.1-5.0.9.el7_9.tuxcare.els8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }