A flaw was found in the FreeRDP used by Anacondas remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the service to crash and remain defunct, resulting in a denial of service. It occurs pre-boot and is likely due to a NULL pointer dereference. Rebooting is required to recover the system.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freerdp | Freerdp | 3.0.0 (including) | 3.16.0 (excluding) |
| Red Hat Enterprise Linux 10 | RedHat | freerdp-2:3.10.3-3.el10_0 | * |
| Freerdp3 | Ubuntu | noble | * |
| Freerdp3 | Ubuntu | oracular | * |
| Freerdp3 | Ubuntu | plucky | * |
| Freerdp3 | Ubuntu | upstream | * |