The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60173 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624)

    * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299)

    * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289)

    * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow     (CVE-2026-68580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61250 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624)

    * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299)

    * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289)

    * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow     (CVE-2026-68580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0264 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-64624:
    FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options,     exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with     /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or     expose local filesystems without user interaction.

    CVE-2026-67289:
    FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the     server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's     ServerHostname and, when the client connects through an HTTP proxy, is written directly into the proxy     CONNECT request line and Host header by http_proxy_connect() without filtering. A malicious or compromised     RDP server can send a crafted redirection PDU containing embedded control characters to inject arbitrary     headers/requests into the HTTP proxy CONNECT request.

    CVE-2026-67299:
    FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for     WINDOW_ICON_ORDER when AsyncUpdate is enabled (e.g. xfreerdp /async-update). In     update_message_WindowIcon() a shallow CopyMemory() overwrites a freshly allocated lParam->iconInfo with     the parser-owned windowIcon->iconInfo pointer. After the parser callback returns,     update_recv_window_info_order() frees window_icon.iconInfo, but the queued async message still retains and     later dispatches that stale pointer. A malicious or compromised RDP server sending a crafted RAIL Window     Alternate Secondary Order with WINDOW_ORDER_ICON can trigger use-after-free, leading to memory corruption     and client crash.

    CVE-2026-68580:
    FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel     (audin) across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket     parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing allocation size     wraparound, resulting in heap-based buffer overflow on ALSA or denial of service on all platforms.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62401 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624)

    * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299)

    * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289)

    * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow     (CVE-2026-68580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
339922	RHEL 8 : freerdp (RHSA-2026:60173)	Nessus	Red Hat Local Security Checks	2026/8/26	2026/8/28	critical
341630	RHEL 8 : freerdp (RHSA-2026:61250)	Nessus	Red Hat Local Security Checks	2026/8/31	2026/8/31	critical
342093	Alibaba Cloud Linux 3 : 0264: freerdp (ALINUX3-SA-2026:0264)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/9/1	2026/9/1	critical
342390	RHEL 7 : freerdp (RHSA-2026:62401)	Nessus	Red Hat Local Security Checks	2026/9/2	2026/9/2	critical

检测

插件搜索

critical

critical

critical

critical