The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated     auth_length field read from the network triggers a WINPR_ASSERT() failure in     rts_read_auth_verifier_no_checks(), causing any FreeRDP client connecting through a malicious RDP Gateway     to crash with SIGABRT. This is a pre-authentication denial of service affecting all FreeRDP clients using     RPC-over-HTTP gateway transport. The assertion is active in default release builds     (WITH_VERBOSE_WINPR_ASSERT=ON). This issue has been patched in version 3.24.2. (CVE-2026-33952)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-33952

medium Nessus Plugin ID 303846

Version 1.7