CVE-2021-37595 Other in n/a
Missing input validation in FreeRDP Windows client allows attackers to cause a denial of service via malformed File Contents Request PDUs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-37595?
CVE-2021-37595 is a critical vulnerability in Freerdp Freerdp, published on 27 Jul 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request PDU.
Weakness: CWE-20
Which versions are affected by CVE-2021-37595?
It affects 1 product.
Products include Freerdp Freerdp.
How do I fix CVE-2021-37595?
No fix has been published for CVE-2021-37595 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-37595 being exploited?
There is no known exploitation of CVE-2021-37595 in the wild and no public exploit code.
Other vulnerabilities in Freerdp Freerdp
- CVE-2021-37594 Other in n/a
- CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr
- CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass
- CVE-2026-67289 FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection
- CVE-2026-67292 FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure