Bug 2552984 (CVE-2026-110831)
| Summary: | CVE-2026-110831 freerdp: FreeRDP: Denial of Service via file handle leak during drive redirection | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in FreeRDP. When a client connects to a malicious Remote Desktop Protocol (RDP) server with drive redirection enabled, the server can send a specially crafted request that triggers an error during file allocation. Because FreeRDP fails to release the opened local file when this operation fails, operating system file handles remain open until drive teardown. This issue can allow an attacker to cause resource exhaustion, potentially resulting in a Denial of Service (DoS) on the client system.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-10-14 23:03:32 UTC
|