Threats tagged 'ghsa-4c29-wc44-6c3g'

FreeRDP versions prior to 3.32.2 contain a denial-of-service vulnerability in the rdg_process_control_packet function. A malicious RD Gateway can exploit this by sending an incomplete keepalive control packet with a large packetLength header but withholding the body. This causes the client to enter an unbounded read loop, spinning one thread at full CPU and exhausting client resources.