Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel
Vulnerability Description
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
堆缓冲区溢出
Vulnerability Title
FreeRDP 缓冲区错误漏洞
Vulnerability Description
FreeRDP是FreeRDP团队开源的一款远程桌面协议(RDP)的实现。 FreeRDP 3.29.0之前版本存在安全漏洞,该漏洞源于音频输入重定向通道(audin)的ALSA、sndio、WinMM和OpenSL ES后端未能验证RDP服务器的FramesPerPacket参数,导致整数溢出,攻击者可提供恶意FramesPerPacket值造成分配大小环绕,从而导致ALSA平台上的堆缓冲区溢出或所有平台上的拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A