Bug 2565884 (CVE-2026-121405)
| Summary: | CVE-2026-121405 freerdp: FreeRDP: Denial of Service via excessive memory allocation in serial device redirection | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in FreeRDP. When serial device redirection is enabled, a malicious Remote Desktop Protocol (RDP) server can send a crafted serial device-control request specifying an excessively large output buffer length. Because FreeRDP fails to limit this buffer length before allocating memory, this issue allows the server to trigger excessive memory consumption, resulting in a Denial of Service (DoS) due to client memory exhaustion or crash.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2565988, 2565990 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-11-03 15:31:51 UTC
|