UnratedFix available
UBUNTU-CVE-2026-91950
FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds validation. A malicious RDP server can send a crafted RDPDR packet with computerNameLen set to 0xFFFFFFF0 to bypass bounds checks and trigger memory reads past the packet buffer, causing client crashes or heap disclosure in logs.
Announced Group revision 1
Original source ↗UBUNTU-CVE-2026-91950
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-91950
freerdp
Source reference: /affected/0/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1
Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3Source reference:
/affected/0/versions1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/1/package/name
- Affected versions
- 2.0.0~git20170725.1.1648deb+dfsg1-1
Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-6build1Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7Source reference:
/affected/1/versions2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1Source reference:
/affected/1/versions2.1.1+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm1Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm2Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm3Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm4Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm5Source reference:
/affected/1/versions2.2.0+dfsg1-0ubuntu0.18.04.4+esm6Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp
Source reference: /affected/2/package/name
- Affected versions
- 1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1
Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1Source reference:
/affected/2/versions1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/3/package/name
- Affected versions
- 2.0.0~git20190204.1.2693389a+dfsg1-1
Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build1Source reference:
/affected/3/versions2.0.0~git20190204.1.2693389a+dfsg1-2build2Source reference:
/affected/3/versions2.1.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.3Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.4Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.5Source reference:
/affected/3/versions2.2.0+dfsg1-0ubuntu0.20.04.6Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm1Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm2Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm3Source reference:
/affected/3/versions2.6.1+dfsg1-0ubuntu0.20.04.2+esm4Source reference:
/affected/3/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/4/package/name
- Affected versions
- 2.3.0+dfsg1-2build1
Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu1Source reference:
/affected/4/versions2.3.0+dfsg1-2ubuntu2Source reference:
/affected/4/versions2.4.1+dfsg1-1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu1Source reference:
/affected/4/versions2.4.1+dfsg1-1ubuntu2Source reference:
/affected/4/versions2.5.0+dfsg1-1Source reference:
/affected/4/versions2.6.0+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-1Source reference:
/affected/4/versions2.6.1+dfsg1-3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.1Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.2Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.3Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.4Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.5Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.6Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.7Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.8Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.9Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.10Source reference:
/affected/4/versions2.6.1+dfsg1-3ubuntu2.11Source reference:
/affected/4/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/5/package/name
- Affected versions
- 3.4.0+dfsg1-0ubuntu2
Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu3Source reference:
/affected/5/versions3.4.0+dfsg1-0ubuntu4Source reference:
/affected/5/versions3.5.0+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.1Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.2Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.4Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.5Source reference:
/affected/5/versions3.5.1+dfsg1-0ubuntu1.6Source reference:
/affected/5/versions3.30.0+dfsg-0ubuntu0.24.04.1Source reference:
/affected/5/versions3.30.0+dfsg-0ubuntu0.24.04.2Source reference:
/affected/5/versions - Fixed versions
- 3.31.0+dfsg-0ubuntu0.24.04.1
Source reference:
/affected/5/ranges - Prerequisites
- Not stated in this record
freerdp2
Source reference: /affected/6/package/name
- Affected versions
- 2.10.0+dfsg1-1.1ubuntu1
Source reference:
/affected/6/versions2.11.2+dfsg1-1Source reference:
/affected/6/versions2.11.2+dfsg1-1build1Source reference:
/affected/6/versions2.11.2+dfsg1-1build3Source reference:
/affected/6/versions2.11.5+dfsg1-1build1Source reference:
/affected/6/versions2.11.5+dfsg1-1build2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm1Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm2Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm3Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm4Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm5Source reference:
/affected/6/versions2.11.5+dfsg1-1ubuntu0.1~esm6Source reference:
/affected/6/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
freerdp3
Source reference: /affected/7/package/name
- Affected versions
- 3.16.0+dfsg-2
Source reference:
/affected/7/versions3.18.0+dfsg-1ubuntu1Source reference:
/affected/7/versions3.19.0+dfsg-1Source reference:
/affected/7/versions3.19.1+dfsg-1Source reference:
/affected/7/versions3.20.0+dfsg-1Source reference:
/affected/7/versions3.20.2+dfsg-1Source reference:
/affected/7/versions3.21.0+dfsg-1Source reference:
/affected/7/versions3.22.0+dfsg-1Source reference:
/affected/7/versions3.24.1+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1Source reference:
/affected/7/versions3.24.2+dfsg-1ubuntu1.1Source reference:
/affected/7/versions3.30.0+dfsg-0ubuntu0.26.04.1Source reference:
/affected/7/versions3.30.0+dfsg-0ubuntu0.26.04.2Source reference:
/affected/7/versions - Fixed versions
- 3.31.0+dfsg-0ubuntu0.26.04.1
Source reference:
/affected/7/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.2",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.3",
"1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91950.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.0.0~git20170725.1.1648deb+dfsg1-1",
"2.0.0~git20170725.1.1648deb+dfsg1-5",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu1",
"2.0.0~git20170725.1.1648deb+dfsg1-5ubuntu2",
"2.0.0~git20170725.1.1648deb+dfsg1-6",
"2.0.0~git20170725.1.1648deb+dfsg1-6build1",
"2.0.0~git20170725.1.1648deb+dfsg1-7",
"2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1",
"2.1.1+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.1",
"2.2.0+dfsg1-0ubuntu0.18.04.2",
"2.2.0+dfsg1-0ubuntu0.18.04.3",
"2.2.0+dfsg1-0ubuntu0.18.04.4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm1",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm2",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm3",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm4",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm5",
"2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91950.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.2.0+dfsg1-0ubuntu0.18.04.4+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp",
"purl": "pkg:deb/ubuntu/freerdp?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.1",
"1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91950.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-x11",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-cache1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-codec1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-common1.1.0",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-core1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-crypto1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-gdi1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-locale1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-plugins-standard",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-primitives1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-rail1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libfreerdp-utils1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-asn1-0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-bcrypt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credentials0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-credui0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crt0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-crypto0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-dsparse0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-environment0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-error0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-file0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-handle0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-heap0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-input0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-interlocked0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-io0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-library0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-path0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pipe0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-pool0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-registry0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-rpc0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspi0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sspicli0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-synch0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-sysinfo0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-thread0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-timezone0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-utils0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winhttp0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libwinpr-winsock0.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
},
{
"binary_name": "libxfreerdp-client1.1",
"binary_version": "1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.0.0~git20190204.1.2693389a+dfsg1-1",
"2.0.0~git20190204.1.2693389a+dfsg1-2",
"2.0.0~git20190204.1.2693389a+dfsg1-2build1",
"2.0.0~git20190204.1.2693389a+dfsg1-2build2",
"2.1.1+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.1",
"2.2.0+dfsg1-0ubuntu0.20.04.2",
"2.2.0+dfsg1-0ubuntu0.20.04.3",
"2.2.0+dfsg1-0ubuntu0.20.04.4",
"2.2.0+dfsg1-0ubuntu0.20.04.5",
"2.2.0+dfsg1-0ubuntu0.20.04.6",
"2.6.1+dfsg1-0ubuntu0.20.04.1",
"2.6.1+dfsg1-0ubuntu0.20.04.2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm1",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm2",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm3",
"2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91950.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-0ubuntu0.20.04.2+esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.3.0+dfsg1-2build1",
"2.3.0+dfsg1-2ubuntu1",
"2.3.0+dfsg1-2ubuntu2",
"2.4.1+dfsg1-1",
"2.4.1+dfsg1-1ubuntu1",
"2.4.1+dfsg1-1ubuntu2",
"2.5.0+dfsg1-1",
"2.6.0+dfsg1-1",
"2.6.1+dfsg1-1",
"2.6.1+dfsg1-3",
"2.6.1+dfsg1-3ubuntu1",
"2.6.1+dfsg1-3ubuntu2",
"2.6.1+dfsg1-3ubuntu2.1",
"2.6.1+dfsg1-3ubuntu2.2",
"2.6.1+dfsg1-3ubuntu2.3",
"2.6.1+dfsg1-3ubuntu2.4",
"2.6.1+dfsg1-3ubuntu2.5",
"2.6.1+dfsg1-3ubuntu2.6",
"2.6.1+dfsg1-3ubuntu2.7",
"2.6.1+dfsg1-3ubuntu2.8",
"2.6.1+dfsg1-3ubuntu2.9",
"2.6.1+dfsg1-3ubuntu2.10",
"2.6.1+dfsg1-3ubuntu2.11"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91950.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-client2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-server2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp-shadow2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libfreerdp2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libuwac0-0",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr-tools2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "libwinpr2-2",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.6.1+dfsg1-3ubuntu2.11"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.0+dfsg-0ubuntu0.24.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.4.0+dfsg1-0ubuntu2",
"3.4.0+dfsg1-0ubuntu3",
"3.4.0+dfsg1-0ubuntu4",
"3.5.0+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1",
"3.5.1+dfsg1-0ubuntu1.1",
"3.5.1+dfsg1-0ubuntu1.2",
"3.5.1+dfsg1-0ubuntu1.4",
"3.5.1+dfsg1-0ubuntu1.5",
"3.5.1+dfsg1-0ubuntu1.6",
"3.30.0+dfsg-0ubuntu0.24.04.1",
"3.30.0+dfsg-0ubuntu0.24.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91950.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.24.04.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "freerdp2",
"purl": "pkg:deb/ubuntu/freerdp2?arch=source&distro=esm-apps%2Fnoble",
"ecosystem": "Ubuntu:Pro:24.04:LTS"
},
"versions": [
"2.10.0+dfsg1-1.1ubuntu1",
"2.11.2+dfsg1-1",
"2.11.2+dfsg1-1build1",
"2.11.2+dfsg1-1build3",
"2.11.5+dfsg1-1build1",
"2.11.5+dfsg1-1build2",
"2.11.5+dfsg1-1ubuntu0.1~esm1",
"2.11.5+dfsg1-1ubuntu0.1~esm2",
"2.11.5+dfsg1-1ubuntu0.1~esm3",
"2.11.5+dfsg1-1ubuntu0.1~esm4",
"2.11.5+dfsg1-1ubuntu0.1~esm5",
"2.11.5+dfsg1-1ubuntu0.1~esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91950.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp2-shadow-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-wayland",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "freerdp2-x11",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-client2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-server2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow-subsystem2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp-shadow2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libfreerdp2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libuwac0-0t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr-tools2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "libwinpr2-2t64",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
},
{
"binary_name": "winpr-utils",
"binary_version": "2.11.5+dfsg1-1ubuntu0.1~esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.0+dfsg-0ubuntu0.26.04.1"
}
]
}
],
"package": {
"name": "freerdp3",
"purl": "pkg:deb/ubuntu/freerdp3?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.16.0+dfsg-2",
"3.18.0+dfsg-1ubuntu1",
"3.19.0+dfsg-1",
"3.19.1+dfsg-1",
"3.20.0+dfsg-1",
"3.20.2+dfsg-1",
"3.21.0+dfsg-1",
"3.22.0+dfsg-1",
"3.24.1+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1",
"3.24.2+dfsg-1ubuntu1.1",
"3.30.0+dfsg-0ubuntu0.26.04.1",
"3.30.0+dfsg-0ubuntu0.26.04.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91950.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "freerdp-proxy",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-proxy-modules",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-sdl",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-proxy-modules",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-sdl",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-shadow-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-wayland",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "freerdp3-x11",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-client3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server-proxy3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-server3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow-subsystem3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp-shadow3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libfreerdp3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr-tools3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "libwinpr3-3",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
},
{
"binary_name": "winpr3-utils",
"binary_version": "3.31.0+dfsg-0ubuntu0.26.04.1"
}
],
"availability": "No subscription required"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #5835 · Revision 1
- Added to Heist Feed
- Publisher date