Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 之前 3.32.0 的 FreeRDP 无法关闭 serial_process_irp_create 中的先前序列句柄，从而允许恶意 RDP 服务器耗尽文件描述符。攻击者可发送重复的串行 IRP_MJ_CREATE 请求来累积描述符并在 CommReadFile FD_SETSIZE断言处终止客户端。
    (CVE-2026-110830)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 3.32.0 以前の FreeRDP は、serial_process_irp_create の以前のシリアルハンドルを閉じることができず、悪意のある RDP サーバーがファイル記述子を使い果たす可能性があります。攻撃者が繰り返されるシリアルIRP_MJ_CREATEリクエストを送信して記述子を蓄積し、CommReadFile FD_SETSIZEアサーションでクライアントを終了させる可能性があります。
    (CVE-2026-110830)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - FreeRDP before 無法 3.32.0 關閉 serial_process_irp_create 中先前的序列控制碼，允許惡意RDP伺服器耗盡檔案描述元。攻擊者可以傳送重複的序列IRP_MJ_CREATE要求來累積描述元，並在 CommReadFile FD_SETSIZE判斷提示處終止用戶端。
    (CVE-2026-110830)

請注意，Nessus 依賴供應商報告的套件存在。

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94514 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242)

    * freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect (CVE-2026-109676)

    * freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch (CVE-2026-110838)

    * freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling     (CVE-2026-110830)

    * freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding     (CVE-2026-110837)

    * freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly     (CVE-2026-110833)

    * freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion (CVE-2026-110839)

    * freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser (CVE-2026-111378)

    * freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file (CVE-2026-111379)

    * freerdp: freerdp: Arbitrary code execution via crafted persistent cache file (CVE-2026-111381)

    * freerdp: freerdp: Arbitrary code execution via crafted display frames (CVE-2026-111382)

    * freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication     (CVE-2026-111880)

    * freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats (CVE-2026-114045)

    Bug Fix(es) and Enhancement(s):

    * Rebase FreeRDP to 3.32.2 or newer [rhel-10.2.z] (JIRA:RHEL-277442)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793202461 advisory.

  - FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a     malicious RDP server to exhaust file descriptors. Attackers can send repeated serial IRP_MJ_CREATE     requests to accumulate descriptors and terminate the client at the CommReadFile FD_SETSIZE assertion.
    (CVE-2026-110830)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-94514 advisory.

    [2:3.32.2-1]
    - Update to 3.32.2
    - Backport gateway freeze and busy-loop fixes, including partial-header handling
    - Reset completed RDG header state before control-packet dispatch
    - Keep WebSocket and chunked-transfer decoder state separate       Resolves: RHEL-277442       Resolves: RHEL-282285, RHEL-283665, RHEL-283685, RHEL-283719, RHEL-285001       Resolves: RHEL-285015, RHEL-285030, RHEL-285031, RHEL-286605, RHEL-288167

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_94514 advisory.

    * freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242)

    * freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect (CVE-2026-109676)

    * freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch (CVE-2026-110838)

    * freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling     (CVE-2026-110830)

    * freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding     (CVE-2026-110837)

    * freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly     (CVE-2026-110833)

    * freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion (CVE-2026-110839)

    * freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser (CVE-2026-111378)

    * freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file (CVE-2026-111379)

    * freerdp: freerdp: Arbitrary code execution via crafted persistent cache file (CVE-2026-111381)

    * freerdp: freerdp: Arbitrary code execution via crafted display frames (CVE-2026-111382)

    * freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication     (CVE-2026-111880)

    * freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats (CVE-2026-114045)

    Bug Fix(es) and Enhancement(s):

    * Rebase FreeRDP to 3.32.2 or newer [rhel-10.2.z] (JIRA:Rocky Linux-277442)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a     malicious RDP server to exhaust file descriptors. Attackers can send repeated serial IRP_MJ_CREATE     requests to accumulate descriptors and terminate the client at the CommReadFile FD_SETSIZE assertion.
    (CVE-2026-110830)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:94514 advisory.

    * freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242)

    * freerdp: FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect (CVE-2026-109676)

    * freerdp: FreeRDP: Unauthenticated keystroke injection via premature input dispatch (CVE-2026-110838)

    * freerdp: freerdp: Denial of Service via file descriptor exhaustion in serial device handling     (CVE-2026-110830)

    * freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding     (CVE-2026-110837)

    * freerdp: freerdp: Denial of Service via unbounded memory consumption during RDPDR reassembly     (CVE-2026-110833)

    * freerdp: FreeRDP: Denial of Service via grayscale JPEG clipboard conversion (CVE-2026-110839)

    * freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser (CVE-2026-111378)

    * freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file (CVE-2026-111379)

    * freerdp: freerdp: Arbitrary code execution via crafted persistent cache file (CVE-2026-111381)

    * freerdp: freerdp: Arbitrary code execution via crafted display frames (CVE-2026-111382)

    * freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication     (CVE-2026-111880)

    * freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats (CVE-2026-114045)

    Bug Fix(es) and Enhancement(s):

    * Rebase FreeRDP to 3.32.2 or newer [rhel-10.2.z] (JIRA:Rocky Linux-277442)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
371842	Amazon Linux 2023：freerdp、freerdp-devel、freerdp-libs (ALAS2023-2026-3307)	Nessus	Amazon Linux Local Security Checks	2026/10/25	2026/10/25	high
366137	Linux Distros 未修补的漏洞：CVE-2026-110830	Nessus	Misc.	2026/10/15	2026/11/6	high
371842	Amazon Linux 2023 : freerdp、freerdp-devel、freerdp-libs (ALAS2023-2026-3307)	Nessus	Amazon Linux Local Security Checks	2026/10/25	2026/10/25	high
366137	Linux Distros のパッチ未適用の脆弱性: CVE-2026-110830	Nessus	Misc.	2026/10/15	2026/11/6	high
371842	Amazon Linux 2023：freerdp、freerdp-devel、freerdp-libs (ALAS2023-2026-3307)	Nessus	Amazon Linux Local Security Checks	2026/10/25	2026/10/25	high
366137	Linux Distros 未修補弱點：CVE-2026-110830	Nessus	Misc.	2026/10/15	2026/11/6	high
375538	RHEL 10 : freerdp (RHSA-2026:94514)	Nessus	Red Hat Local Security Checks	2026/11/3	2026/11/5	high
375245	CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel (CENTOS7:CLSA-2026:1793202461)	Nessus	CentOS Local Security Checks	2026/11/2	2026/11/2	high
375662	Oracle Linux 10 : freerdp (ELSA-2026-94514)	Nessus	Oracle Linux Local Security Checks	2026/11/3	2026/11/3	high
376412	Rocky Linux 10.2 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_94514)	Nessus	Rocky Linux Local Security Checks	2026/11/5	2026/11/5	high
371842	Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-3307)	Nessus	Amazon Linux Local Security Checks	2026/10/25	2026/10/25	high
366137	Linux Distros Unpatched Vulnerability : CVE-2026-110830	Nessus	Misc.	2026/10/15	2026/11/6	high
375842	RockyLinux 10 : freerdp (RLSA-2026:94514)	Nessus	Rocky Linux Local Security Checks	2026/11/4	2026/11/5	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high