Description
FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | freerdp | 1.0.2-9.1 | SUSE-SU-2016:2506-1 |
Advisories 1
- SUSE-SU-2016:2506-1 Security update for freerdp SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [oss-security] 20130711 Re: CVE Request -- FreeRDP: Multiple security fixes in 1.1.0-beta1 version mailing-list
- [oss-security] 20130712 Re: CVE Request -- FreeRDP: Multiple security fixes in 1.1.0-beta1 version mailing-list
- openSUSE-SU-2016:2400 vendor-advisory
- openSUSE-SU-2016:2402 vendor-advisory
- 61072 vdb-entry
- https://github.com/FreeRDP/FreeRDP/commit/7d58aac24fe20ffaad7bd9b40c9ddf457c1b06e7