CVE-2026-33995 in FreeRDP
요약 (영어)
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in kerberos_AcceptSecurityContext() and kerberos_InitializeSecurityContextA() (WinPR, winpr/libwinpr/sspi/Kerberos/kerberos.c) can cause a crash in any FreeRDP clients on systems where Kerberos and/or Kerberos U2U is configured (Samba AD member, or krb5 for NFS). The crash is triggered during NLA connection teardown and requires a failed authentication attempt. This issue has been patched in version 3.24.2.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
책임이 있는
GitHub_M
예약하다
2026. 03. 24.
공개
2026. 03. 31.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354280 | FreeRDP kerberos.c kerberos_AcceptSecurityContext 메모리 손상 | 415 | 정의되지 않음 | 공식 수정 | CVE-2026-33995 |