CVE-2026-109949: FreeRDP, логическа грешка

Описание

Оригинално описание

FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartcard GIDS implementation, which stores the PIN retry counter per-handle. A malicious RDP server can exhaust the counter with VERIFY APDUs, then request a new SCardConnect to reset attempts, enabling unbounded online brute-forcing of the configured smartcard PIN.

Засегнати продукти

• FreeRDP FreeRDP: 3.0.0 преди 3.32.0; 3.32.0

Вид слабост

• CWE-307 Неправилно ограничаване на прекомерни опити за автентикация

История

Други уязвимости в FreeRDP FreeRDP

• 7.1CVE-2026-121412
• 5.3CVE-2026-121410
• 3.1CVE-2026-121411
• 8.2CVE-2026-121409
• 6.0CVE-2026-121408

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-109949
• https://nvd.nist.gov/vuln/detail/CVE-2026-109949
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-chh2-527f-x255
• https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-pin-brute-force-via-virtual-smartcard