FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect.

FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clients to spin server threads by sending zero-length drdynvc DATA PDUs. Attackers can send empty DATA messages on opened audin or rdpgfx channels, so that FreeRDP_WTSVirtualChannelRead never consumes them, consuming full CPU cores until disconnect.

freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted persistent cache file freerdp: freerdp: Arbitrary code execution via crafted display frames freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads freerdp: freerdp: Denial of Service via uncontrolled memory allocation in dynamic virtual channels freerdp: FreeRDP: Denial of Service via assertion failure in RemoteFX decoder freerdp: freerdp: Denial of Service via zero-width graphics reset freerdp: freerdp: Denial of Service via zero-length dynamic virtual channel messages