Bug 2565859 (CVE-2026-121407)
| Summary: | CVE-2026-121407 freerdp: freerdp: Denial of Service via malformed remdesk channel payload | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in FreeRDP. An authenticated remote attacker can cause a Denial of Service (DoS) by sending a specially crafted message to the shadow server's remdesk virtual channel. Due to an inverted packet length verification check, processing the malformed data triggers an internal assertion failure. This aborts the server process and terminates all active user sessions.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2565991, 2565993 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-11-03 15:03:59 UTC
|