tocsin

Debian/freerdp3: unknown

FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNEL_OPTION_SHOW_PROTOCOL is enabled. Authenticated clients can queue

Action: Upgrade freerdp3 to 3.31.0+dfsg-1 or later.

Affected

introducedfixedlast affected
03.31.0+dfsg-1-

Fixed versions

3.31.0+dfsg-1

Sources

published · modified · JSON