The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2081 advisory.

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)
      * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)
      * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
      * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)
      * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service     and potential code execution. (CVE-2026-23531)
      * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)
      * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2222 advisory.

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)
      * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)
      * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
      * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)
      * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service     and potential code execution. (CVE-2026-23531)
      * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)
      * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side     heap buffer overflow occurs in the ClearCodec bands decode path when crafted band coordinates allow writes     past the end of the destination surface buffer. A malicious server can trigger a clientside heap buffer     overflow, causing a crash (DoS) and potential heap corruption with codeexecution risk depending on     allocator behavior and surrounding heap layout. Version 3.21.0 contains a patch for the issue.
    (CVE-2026-23534)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0421-1 advisory.

    - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats     (bsc#1256718).
    - CVE-2026-22854: server-controlled read length is used to read file data into an IRP output can cause       heap-buffer-overflow in drive_process_irp_read (bsc#1256720).
    - CVE-2026-22856: race condition in the serial channel IRP thread tracking can cause heap-use-after-free       in create_irp_thread(bsc#1256722).
    - CVE-2026-22859: improper bound check can lead to heap-buffer-overflow in urb_select_configuration     (bsc#1256725).
    - CVE-2026-23530: improper validation can lead to heap buffer overflow in `planar_decompress_plane_rle`     (bsc#1256940).
    - CVE-2026-23531: improper validation in `clear_decompress` can lead to heap buffer overflow     (bsc#1256941).
    - CVE-2026-23532: mismatch between destination rectangle clamping and the actual copy size can lead to a     heap buffer       overflow in `gdi_SurfaceToSurface` (bsc#1256942).
    - CVE-2026-23534: missing checks can lead to heap buffer overflow in `clear_decompress_bands_data`     (bsc#1256944).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0449-1 advisory.

    - CVE-2026-22852: a  malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats     (bsc#1256718).
    - CVE-2026-22854: server-controlled read length is used to read file data into an IRP output can cause       heap-buffer-overflow in drive_process_irp_read (bsc#1256720).
    - CVE-2026-22856: race condition in the serial channel IRP thread tracking can cause heap-use-after-free       in create_irp_thread(bsc#1256722).
    - CVE-2026-22859: improper bound check can lead to heap-buffer-overflow in urb_select_configuration     (bsc#1256725).
    - CVE-2026-23530: improper validation can lead to heap buffer overflow in `planar_decompress_plane_rle`     (bsc#1256940).
    - CVE-2026-23531: improper validation in `clear_decompress` can lead to heap buffer overflow     (bsc#1256941).
    - CVE-2026-23532: mismatch between destination rectangle clamping and the actual copy size can lead to a     heap buffer       overflow in `gdi_SurfaceToSurface` (bsc#1256942).
    - CVE-2026-23534: missing checks can lead to heap buffer overflow in `clear_decompress_bands_data`     (bsc#1256944).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0345-1 advisory.

    - CVE-2025-4478: Fixed initialization of function pointers after       resource allocations (bsc#1243109)
    - CVE-2026-22851: Fixed RDPGFX ResetGraphics race leading to       use-after-free in SDL client (sdl->primary) (bsc#1256717)
    - CVE-2026-22852: Fixed heap-buffer-overflow in audin_process_formats       (bsc#1256718)
    - CVE-2026-22853: Fixed heap-buffer-overflow in ndr_read_uint8Array       (bsc#1256719)
    - CVE-2026-22854: Fixed heap-buffer-overflow in drive_process_irp_read       (bsc#1256720)
    - CVE-2026-22855: Fixed heap-buffer-overflow in smartcard_unpack_set_attrib_call       (bsc#1256721)
    - CVE-2026-22856: Fixed heap-use-after-free in create_irp_thread (bsc#1256722)
    - CVE-2026-22857: Fixed heap-use-after-free in irp_thread_func (bsc#1256723)
    - CVE-2026-22858: Fixed global-buffer-overflow in crypto_base64_devoce       (bsc#1256724)
    - CVE-2026-22859: Fixed heap-buffer-overflow in urb_select_configuration       (bsc#1256725)
    - CVE-2026-23530: Fixed improper validation leading to heap buffer overflow       in `planar_decompress_plane_rle` (bsc#1256940)
    - CVE-2026-23531: Fixed improper validation in `clear_decompress` leading to       heap buffer overflow (bsc#1256941)
    - CVE-2026-23532: Fixed mismatch between destination rectangle clamping and       the actual copy size leading to heap buffer overflow in       `gdi_SurfaceToSurface` (bsc#1256942)
    - CVE-2026-23533: Fixed improper validation leading to heap buffer overflow in       `clear_decompress_residual_data` (bsc#1256943)
    - CVE-2026-23534: Fixed missing checks leading to heap buffer overflow in       `clear_deceompress_bands_data` (bsc#1256944)
    - CVE-2026-23732: Fixed improper validation leading to heap buffer overflow in       `Glyph_alloc` (bsc#1256945)
    - CVE-2026-23883: Fixed use-after-free when `update_pointer_color` and       `freerdp_image_copy_fromPointer_data` fail (bsc#1256946)
    - CVE-2026-23884: Fixed use-after-free in `gdi_set_bounds` (bsc#1256947)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-23d669bf94 advisory.

    Update to 3.21.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2081 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:2081 advisory.

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2048 advisory.

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)
      * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)
      * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
      * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)
      * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service     and potential code execution. (CVE-2026-23531)
      * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)
      * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2736 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3037 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
298191	AlmaLinux 8 : freerdp (ALSA-2026:2081)	Nessus	Alma Linux Local Security Checks	2026/2/6	2026/2/6	high
298477	AlmaLinux 10 : freerdp (ALSA-2026:2222)	Nessus	Alma Linux Local Security Checks	2026/2/10	2026/2/10	high
291615	Linux Distros Unpatched Vulnerability : CVE-2026-23534	Nessus	Misc.	2026/1/19	2026/7/21	high
298603	SUSE SLES15 Security Update : freerdp (SUSE-SU-2026:0421-1)	Nessus	SuSE Local Security Checks	2026/2/11	2026/2/11	high
298750	SUSE SLED15: freerdp2 / freerdp2-devel / freerdp2-proxy / freerdp2-server / etc (SUSE-SU-2026:0449-1)	Nessus	SuSE Local Security Checks	2026/2/12	2026/6/26	high
297418	SUSE SLED15: freerdp / freerdp-devel / freerdp-proxy / freerdp-proxy-plugins / etc (SUSE-SU-2026:0345-1)	Nessus	SuSE Local Security Checks	2026/1/31	2026/6/26	high
296240	Fedora 43 : freerdp (2026-23d669bf94)	Nessus	Fedora Local Security Checks	2026/1/23	2026/4/30	high
298012	RHEL 8 : freerdp (RHSA-2026:2081)	Nessus	Red Hat Local Security Checks	2026/2/5	2026/4/30	high
298204	RockyLinux 8 : freerdp (RLSA-2026:2081)	Nessus	Rocky Linux Local Security Checks	2026/2/6	2026/2/6	high
298478	AlmaLinux 9 : freerdp (ALSA-2026:2048)	Nessus	Alma Linux Local Security Checks	2026/2/10	2026/2/10	high
299198	RHEL 9 : freerdp (RHSA-2026:2736)	Nessus	Red Hat Local Security Checks	2026/2/16	2026/2/16	high
299765	RHEL 9 : freerdp (RHSA-2026:3037)	Nessus	Red Hat Local Security Checks	2026/2/23	2026/2/23	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high