Bug 2565882 (CVE-2026-121409)
| Summary: | CVE-2026-121409 freerdp: freerdp: Denial of Service via oversized X.224 routing token | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in FreeRDP. This vulnerability allows a malicious server or an unauthenticated remote peer to cause a Denial of Service (DoS) by sending an oversized connection routing token. When the client or proxy processes this oversized data during connection negotiation, an internal validation failure causes the application process to terminate unexpectedly.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2565994, 2565997 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-11-03 15:28:58 UTC
|