CVE-2026-111377

A flaw was found in FreeRDP. An authenticated remote attacker can cause a Denial of Service (DoS) by initiating a message on a static virtual channel and repeatedly sending data fragments without completing the transmission. Because the server fails to enforce cumulative size limits during message reassembly, it continuously retains memory for the incomplete stream, potentially exhausting system memory and causing the server to crash.

This vulnerability is rated as Moderate because exploitation requires an established, authenticated connection to an RDP server and results exclusively in denial of service via memory exhaustion, without enabling unauthorized data access or remote code execution. In Red Hat Enterprise Linux, FreeRDP packages are primarily utilized for client-side connectivity, whereas the affected code path resides within the server-side virtual channel processing pipeline. Therefore, systems are only exposed if they specifically host an RDP server component or session-sharing daemon that handles untrusted client traffic.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.