DEBIAN-CVE-2026-121396: Medium severity debian/freerdp2 vulnerability
FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rtsreadauthverifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the connecting client process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/freerdp3to a version that resolves this vulnerability.Fixed in 3.32.2+dfsg-1
Event History
Frequently Asked Questions
Which clients are exposed to this issue?
FreeRDP clients from 3.0.0 before 3.32.2 are affected only when built with verbose WinPR assertions. The listed Debian packages are freerdp3 and freerdp2.
What does an attacker need to exploit it?
An attacker needs control of an RD Gateway used by the connecting client. They can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding during the connection.
What is the practical impact?
Successful exploitation aborts the connecting FreeRDP client process. The provided severity data indicates an availability impact and no stated confidentiality or integrity impact.