FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue has been resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections if possible or use a direct connection without a gateway.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the freerdp-2.4.1-2.el9 build changelog.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has freerdp packages installed that are affected by multiple vulnerabilities:

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has freerdp packages installed that are affected by multiple vulnerabilities:

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202210-24 (FreeRDP: Multiple Vulnerabilities)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN     Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This     issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is     patched in FreeRDP 2.7.0. There are currently no known workarounds. (CVE-2022-24882)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side     authentication against a `SAM` file might be successful for invalid credentials if the server has     configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations     using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this     issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path     configured is valid and the application has file handles left. (CVE-2022-24883)

  - FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using     `/parallel` command line switch might read uninitialized data and send it to the server the client is     currently connected to. FreeRDP based server implementations are not affected. Please upgrade to 2.8.1     where this issue is patched. If unable to upgrade, do not use parallel port redirection (`/parallel`     command line switch) as a workaround. (CVE-2022-39282)

  - FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the     `/video` command line switch might read uninitialized data, decode it as audio/video and display the     result. FreeRDP based server implementations are not affected. This issue has been patched in version     2.8.1. If you cannot upgrade do not use the `/video` switch. (CVE-2022-39283)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-082 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2993-1 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2890-1 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2891-1 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has freerdp packages installed that are affected by multiple vulnerabilities:

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4622 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4622 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5154-1 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4622 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4622 advisory.

  - freerdp: improper client input validation for gateway connections allows to overwrite memory     (CVE-2021-41159)

  - freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4619 advisory.

  - freerdp: improper client input validation for gateway connections allows to overwrite memory     (CVE-2021-41159)

  - freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4621 advisory.

  - freerdp: improper client input validation for gateway connections allows to overwrite memory     (CVE-2021-41159)

  - freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4620 advisory.

  - freerdp: improper client input validation for gateway connections allows to overwrite memory     (CVE-2021-41159)

  - freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4623 advisory.

  - freerdp: improper client input validation for gateway connections allows to overwrite memory     (CVE-2021-41159)

  - freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4622 advisory.

  - freerdp: improper client input validation for gateway connections allows to overwrite memory     (CVE-2021-41159)

  - freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4619 advisory.

  - freerdp: improper client input validation for gateway connections allows to overwrite memory     (CVE-2021-41159)

  - freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4619 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input     data. A malicious gateway might allow client memory to be written out of bounds. This issue has been     resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections     if possible or use a direct connection without a gateway. (CVE-2021-41159)

  - FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    In affected versions a malicious server might trigger out of bound writes in a connected client.
    Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0`     width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the     memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not     allocated) region. This issue has been patched in FreeRDP 2.4.1. (CVE-2021-41160)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
191214	CentOS 9 : freerdp-2.4.1-2.el9	Nessus	CentOS Local Security Checks	high
174063	NewStart CGSL CORE 5.05 / MAIN 5.05 : freerdp Multiple Vulnerabilities (NS-SA-2023-0025)	Nessus	NewStart CGSL Local Security Checks	high
167467	NewStart CGSL MAIN 6.02 : freerdp Multiple Vulnerabilities (NS-SA-2022-0097)	Nessus	NewStart CGSL Local Security Checks	high
166721	GLSA-202210-24 : FreeRDP: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
164784	Amazon Linux 2022 : (ALAS2022-2022-082)	Nessus	Amazon Linux Local Security Checks	high
164665	SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2022:2993-1)	Nessus	SuSE Local Security Checks	high
164441	SUSE SLED12 / SLES12 Security Update : freerdp (SUSE-SU-2022:2890-1)	Nessus	SuSE Local Security Checks	high
164440	SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2022:2891-1)	Nessus	SuSE Local Security Checks	high
160792	NewStart CGSL CORE 5.04 / MAIN 5.04 : freerdp Multiple Vulnerabilities (NS-SA-2022-0021)	Nessus	NewStart CGSL Local Security Checks	high
157831	Rocky Linux 8 : freerdp (RLSA-2021:4622)	Nessus	Rocky Linux Local Security Checks	high
157567	AlmaLinux 8 : freerdp (ALSA-2021:4622)	Nessus	Alma Linux Local Security Checks	high
155681	Ubuntu 18.04 LTS / 20.04 LTS : FreeRDP vulnerabilities (USN-5154-1)	Nessus	Ubuntu Local Security Checks	high
155567	Oracle Linux 8 : freerdp (ELSA-2021-4622)	Nessus	Oracle Linux Local Security Checks	high
155557	CentOS 8 : freerdp (CESA-2021:4622)	Nessus	CentOS Local Security Checks	high
155540	CentOS 7 : freerdp (CESA-2021:4619)	Nessus	CentOS Local Security Checks	high
155336	RHEL 8 : freerdp (RHSA-2021:4621)	Nessus	Red Hat Local Security Checks	high
155335	RHEL 8 : freerdp (RHSA-2021:4620)	Nessus	Red Hat Local Security Checks	high
155334	RHEL 8 : freerdp (RHSA-2021:4623)	Nessus	Red Hat Local Security Checks	high
155333	RHEL 8 : freerdp (RHSA-2021:4622)	Nessus	Red Hat Local Security Checks	high
155332	RHEL 7 : freerdp (RHSA-2021:4619)	Nessus	Red Hat Local Security Checks	high
155298	Oracle Linux 7 : freerdp (ELSA-2021-4619)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2021-41159

high

Tenable Plugins

high

high

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high