Threats tagged 'ghsa-wvcr-9h9j-5rq9'

FreeRDP versions prior to 3.32.2 have a denial of service vulnerability due to improper handling of extended authentication packets. Specifically, the rdg_process_packet function dispatches a PKT_TYPE_EXTENDED_AUTH_MSG without verifying the negotiated mode or authentication context. This allows a malicious or compromised Remote Desktop Gateway to send an extended-auth packet before tunnel authentication, causing a null-pointer dereference that crashes the client application.