FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP server to crash FreeRDP proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0. This vulnerability is fixed in 3.22.0.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1454 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer     dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP server to crash FreeRDP     proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0. This vulnerability     is fixed in 3.22.0. (CVE-2026-23948)

    Client side issue with FreeRDP (CVE-2026-24491)

    Client side issue with FreeRDP (CVE-2026-24675)

    Client side issue with FreeRDP (CVE-2026-24676)

    Client side issue with FreeRDP (CVE-2026-24677)

    Client side issue with FreeRDP (CVE-2026-24678)

    Client side issue with FreeRDP (CVE-2026-24679)

    Client side issue with FreeRDP (CVE-2026-24680)

    Client side issue with FreeRDP (CVE-2026-24681)

    Client side issue with FreeRDP (CVE-2026-24682)

    Client side issue with FreeRDP (CVE-2026-24683)

    Client side issue with FreeRDP (CVE-2026-24684)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3181 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer     dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP server to crash FreeRDP     proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0. This vulnerability     is fixed in 3.22.0. (CVE-2026-23948)

    Client side issue with FreeRDP (CVE-2026-24491)

    Client side issue with FreeRDP (CVE-2026-24675)

    Client side issue with FreeRDP (CVE-2026-24676)

    Client side issue with FreeRDP (CVE-2026-24677)

    Client side issue with FreeRDP (CVE-2026-24679)

    Client side issue with FreeRDP (CVE-2026-24681)

    Client side issue with FreeRDP (CVE-2026-24683)

    Client side issue with FreeRDP (CVE-2026-24684)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fa67f40526 advisory.

    Update to 3.22.0


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8042-1 advisory.

    It was discovered that FreeRDP incorrectly handled memory under certain circumstances, which could lead to     a NULL pointer dereference. An attacker could possibly use this issue to cause a denial of service.
    (CVE-2026-23948)

    It was discovered that FreeRDP did not correctly validate the size of certain variables, which could cause     a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. This issue only affected FreeRDP3 in Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-24491)

    It was discovered that FreeRDP did not correctly validate the size of certain variables, which could cause     a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. (CVE-2026-24675, CVE-2026-24679, CVE-2026-24682)

    It was discovered that FreeRDP had a use after free vulnerability under certain circumstances. An attacker     could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2026-24676,     CVE-2026-24681)

    It was discovered that FreeRDP did not correctly validate the size of certain variables, which could cause     a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute     arbitrary code. This issue only affected Ubuntu 25.10. (CVE-2026-24677)

    It was discovered that FreeRDP had a use after free vulnerability under certain circumstances. An attacker     could use this to cause a denial of service or possibly execute arbitrary code. This issue only affected     Ubuntu 25.10. (CVE-2026-24678)

    It was discovered that FreeRDP had a use after free vulnerability under certain circumstances. An attacker     could use this to cause a denial of service or possibly execute arbitrary code. This issue only affected     FreeRDP3 in Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-24680)

    It was discovered that FreeRDP had a use after free vulnerability under certain circumstances. An attacker     could use this to cause a denial of service or possibly execute arbitrary code. This issue only affected     Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-24683, CVE-2026-24684)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer     dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP server to crash FreeRDP     proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0. This vulnerability     is fixed in 3.22.0. (CVE-2026-23948)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
301354	Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-1454)	Nessus	Amazon Linux Local Security Checks	high
301263	Amazon Linux 2 : freerdp, --advisory ALAS2-2026-3181 (ALAS-2026-3181)	Nessus	Amazon Linux Local Security Checks	high
299425	Fedora 42 : freerdp (2026-fa67f40526)	Nessus	Fedora Local Security Checks	high
299346	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : FreeRDP vulnerabilities (USN-8042-1)	Nessus	Ubuntu Local Security Checks	high
298455	Linux Distros Unpatched Vulnerability : CVE-2026-23948	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-23948

medium

Tenable Plugins

high

high

high

high

medium