GHSA-m7xq-5f7v-hjvw: FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly
FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets connected clients retain heap memory via intercepted DVC message reassembly. Attackers can declare a large DATAFIRST length and keep sending fragments without completing the message, growing proxy memory proportional to traffic and degrading service.
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
FreeRDP proxy deployments using versions from 3.0.0 before 3.32.2 are affected. The issue is in proxy handling of intercepted Dynamic Virtual Channel (DVC) message reassembly.
What access does an attacker need to exploit it?
An attacker needs to be a connected client of the affected proxy. They can declare a large DATA_FIRST length and continue sending message fragments without completing the message.
What is the expected impact?
Incomplete DVC message reassembly can retain heap memory proportional to the traffic sent by the client. This can degrade proxy service through memory exhaustion.