FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_upgrade() detects a mismatch via progressive_rfx_quant_cmp_equal() but only emits WLog_WARN, execution continues. The wrapped value (247) is used as a shift exponent, causing undefined behavior and an approximately 80 billion iteration loop (CPU DoS). This issue has been patched in version 3.24.2.

alma_linux ALSA-2026:8457: ALSA-2026:8457: freerdp security update (High)

oracle_linux ELSA-2026-8457: ELSA-2026-8457:  freerdp security update (IMPORTANT)

alma_linux ALSA-2026:8458: ALSA-2026:8458: freerdp security update (High)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8457 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data     (CVE-2026-33984)

    * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages     (CVE-2026-33983)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8458 advisory.

    - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8458 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data     (CVE-2026-33984)

    * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages     (CVE-2026-33983)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3238 advisory.

    DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4v4p-9v5x-hc93 (CVE-2026-33952)

    DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8f2g-3q27-6xm5 (CVE-2026-33977)

    Progressive Codec Quant BYTE Underflow - UB + CPU DoS

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4gfm-4p52-h478 (CVE-2026-33983)

    ClearCodec resize_vbar_entry() Heap OOB Write

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8469-2xcx-frf6 (CVE-2026-33984)

    ClearCodec Glyph Cache Count Desync - Heap OOB Read

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x6gr-8p7h-5h85 (CVE-2026-33985)

    H.264 YUV Buffer Dimension Desync - Heap OOB Write

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h6qw-wxvm-hf97 (CVE-2026-33986)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1549 advisory.

    DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4v4p-9v5x-hc93 (CVE-2026-33952)

    DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8f2g-3q27-6xm5 (CVE-2026-33977)

    Persistent Cache Allocator Mismatch - Heap OOB Read

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jm9-2925-g4v2 (CVE-2026-33982)

    Progressive Codec Quant BYTE Underflow - UB + CPU DoS

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4gfm-4p52-h478 (CVE-2026-33983)

    ClearCodec resize_vbar_entry() Heap OOB Write

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8469-2xcx-frf6 (CVE-2026-33984)

    ClearCodec Glyph Cache Count Desync - Heap OOB Read

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x6gr-8p7h-5h85 (CVE-2026-33985)

    H.264 YUV Buffer Dimension Desync - Heap OOB Write

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h6qw-wxvm-hf97 (CVE-2026-33986)

    Persistent Cache bmpSize Desync - Heap OOB Write

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ff8h-p5vc-wcwc (CVE-2026-33987)

    double free in kerberos_AcceptSecurityContext and kerberos_IntitalizeSecurityContextA

    NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mv25-f4p2-5mxx (CVE-2026-33995)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-07418a381f advisory.

    Update to 3.24.2

    It fixes CVE-2026-33952, CVE-2026-33977, CVE-2026-33982, CVE-2026-33983,     CVE-2026-33984, CVE-2026-33985, CVE-2026-33986, CVE-2026-33987 and     CVE-2026-33995.

    ----

    Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776, CVE-2026-31806, CVE-2026-31883,     CVE-2026-31884, CVE-2026-31885, CVE-2026-31897)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f6fe509803 advisory.

    Update to 3.24.2

    It fixes CVE-2026-33952, CVE-2026-33977, CVE-2026-33982, CVE-2026-33983,     CVE-2026-33984, CVE-2026-33985, CVE-2026-33986, CVE-2026-33987 and     CVE-2026-33995.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-36ea367760 advisory.

    Update to 3.24.2

    It fixes CVE-2026-33952, CVE-2026-33977, CVE-2026-33982, CVE-2026-33983,     CVE-2026-33984, CVE-2026-33985, CVE-2026-33986, CVE-2026-33987 and     CVE-2026-33995.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2,     progressive_decompress_tile_upgrade() detects a mismatch via progressive_rfx_quant_cmp_equal() but only     emits WLog_WARN, execution continues. The wrapped value (247) is used as a shift exponent, causing     undefined behavior and an approximately 80 billion iteration loop (CPU DoS). This issue has been patched     in version 3.24.2. (CVE-2026-33983)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
306783	RHEL 9 : freerdp (RHSA-2026:8457)	Nessus	Red Hat Local Security Checks	high
306776	Oracle Linux 10 : freerdp (ELSA-2026-8458)	Nessus	Oracle Linux Local Security Checks	high
306762	RHEL 10 : freerdp (RHSA-2026:8458)	Nessus	Red Hat Local Security Checks	high
306291	Amazon Linux 2 : freerdp, --advisory ALAS2-2026-3238 (ALAS-2026-3238)	Nessus	Amazon Linux Local Security Checks	medium
306209	Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-1549)	Nessus	Amazon Linux Local Security Checks	medium
304936	Fedora 42 : freerdp (2026-07418a381f)	Nessus	Fedora Local Security Checks	critical
304442	Fedora 43 : freerdp (2026-f6fe509803)	Nessus	Fedora Local Security Checks	medium
304350	Fedora 44 : freerdp (2026-36ea367760)	Nessus	Fedora Local Security Checks	medium
303848	Linux Distros Unpatched Vulnerability : CVE-2026-33983	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-33983

medium

Tenable Plugins

Coming Soon

high

high

high

medium

medium

critical

medium

medium

medium