The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3067 advisory.

    [2:2.11.7-1.2]
    - Backport several CVE fixes       Resolves: RHEL-148847, RHEL-148887, RHEL-149020

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3334 advisory.

    [2:2.11.7-3]
    - Backport several CVE fixes       Resolves: RHEL-148825, RHEL-148865, RHEL-148982

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-228:04 advisory.

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
      * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
      * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006318 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does     not perform bounds checking on serversupplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as     indices in libusb_udev_complete_msconfig_setup, causing an outofbounds read. This vulnerability is     fixed in 3.20.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007196 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does     not perform bounds checking on serversupplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as     indices in libusb_udev_complete_msconfig_setup, causing an outofbounds read. This vulnerability is     fixed in 3.20.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19033 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22853)

    * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)

    * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)

    * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)

    * freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write (CVE-2026-24678)

    * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)

    * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)

    * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)

    * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)

    * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)

    * freerdp: FreeRDP has a Heap-buffer-overflow in audio_formats_free (CVE-2026-24682)

    * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)

    * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)

    * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)

    * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path     (CVE-2026-26965)

    * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline     (CVE-2026-26955)

    * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages     (CVE-2026-31806)

    * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data     (CVE-2026-33984)

    * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages     (CVE-2026-33983)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19033 advisory.

    - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
    - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)       Resolves: RHEL-162947, RHEL-162963

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1771010890 advisory.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server     can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input (AUDIN) format     lists. audin_process_formats reuses callback->formats_count across multiple MSG_SNDIN_FORMATS PDUs and     writes past the newly allocated formats array, causing memory corruption and a crash. This vulnerability     is fixed in 3.20.1. (CVE-2026-22852)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does     not perform bounds checking on serversupplied MSUSB_INTERFACE_DESCRIPTOR values and uses them as indices     in libusb_udev_complete_msconfig_setup, causing an outofbounds read. This vulnerability is fixed in     3.20.1. (CVE-2026-22859)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec,     when `glyphData` is present, `clear_decompress` calls `freerdp_image_copy_no_overlap` without validating     the destination rectangle, allowing an out-of-bounds read/write via crafted RDPGFX surface updates. A     malicious server can trigger a clientside heap buffer overflow, causing a crash (DoS) and potential heap     corruption with codeexecution risk depending on allocator behavior and surrounding heap layout. Version     3.21.0 contains a patch for the issue. (CVE-2026-23531)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph     parsing trusts `cbData`/remaining length and never validates against the minimum size implied by `cx/cy`.
    A malicious server can trigger a clientside global buffer overflow, causing a crash (DoS). Version 3.21.0     contains a patch for the issue. (CVE-2026-23732)

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New`     frees `cursorPixels` on failure, then `pointer_free` calls `xf_Pointer_Free` and frees it again,     triggering ASan UAF. A malicious server can trigger a clientside use after free, causing a crash (DoS)     and potential heap corruption with codeexecution risk depending on allocator behavior and surrounding     heap layout. Version 3.21.0 contains a patch for the issue. (CVE-2026-23883)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
299814	Oracle Linux 9 : freerdp (ELSA-2026-3067)	Nessus	Oracle Linux Local Security Checks	2026/2/23	2026/4/30	medium
300386	Oracle Linux 8 : freerdp (ELSA-2026-3334)	Nessus	Oracle Linux Local Security Checks	2026/3/3	2026/4/30	medium
300483	MiracleLinux 8 : freerdp-2.11.7-3.el8_10 (AXSA:2026-228:04)	Nessus	Miracle Linux Local Security Checks	2026/3/3	2026/3/3	medium
303875	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-006318)	Nessus	Unity Linux Local Security Checks	2026/3/26	2026/3/26	medium
306811	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-007196)	Nessus	Unity Linux Local Security Checks	2026/4/16	2026/4/20	medium
315441	RHEL 10 : freerdp (RHSA-2026:19033)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/6/12	critical
327011	Oracle Linux 10 : freerdp (ELSA-2026-19033)	Nessus	Oracle Linux Local Security Checks	2026/7/15	2026/7/15	critical
361336	CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1771010890)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

medium

medium

medium

medium

medium

critical

critical

high