{"schema":"threatline.record/2","record":{"id":"GHSA-83g2-gf92-5c4g","aliases":["GHSA-83g2-gf92-5c4g"],"summary":"websocket transport NULL dereference on zero length ping","details":"### Impact\r\n\r\nFreeRDP based clients crash with a NULL dereference if the gateway sends a websocket ping with 0 length.\r\n\r\n### Details\r\n\r\n`websocket_reply_pong` calls `websocket_reply_close` with `nullptr` as stream parameter\r\n\r\n```\r\nWebSocket Ping\r\n      |\r\n      | payloadLength == 0\r\n      v\r\nwebsocket_reply_pong()\r\n      |\r\n      | zero-position response stream\r\n      v\r\nwebsocket_reply_close(..., nullptr)\r\n      |\r\n      v\r\nwebsocket_context_write_wstream(..., nullptr, ...)\r\n      |\r\n      v\r\nWINPR_ASSERT(sPacket)\r\n      |\r\n      v\r\npotential NULL dereference / process termination\r\n```\r\n\r\n### Patches\r\n3.32.0\r\n\r\n### Workarounds\r\nDo not use `websockets` if possible. Use `/gateway:transport:http,no-websockets`\r\n\r\n","categories":["Unclassified"],"product":"FreeRDP","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-83g2-gf92-5c4g","source_modified_at":"2026-10-01T11:19:12Z","fetched_at":"2026-10-23T21:10:45.942435Z","package":{"ecosystem":"c","name":"FreeRDP"},"range":"<= 3.31.1"}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-83g2-gf92-5c4g","source_modified_at":"2026-10-01T11:19:12Z","fetched_at":"2026-10-23T21:10:45.942435Z","package":{"ecosystem":"c","name":"FreeRDP"},"version":"3.32.0"}],"cvss":5.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-01T11:19:12Z","modified_at":"2026-10-01T11:19:12Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-83g2-gf92-5c4g","fetched_at":"2026-10-23T21:10:45.942435Z","source_modified_at":"2026-10-01T11:19:12Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-01T11:19:12Z","content_hash":"7762762894a64bcfe1e1789e591a34cfdce0ea0744a017dac6acede0a5cd8725"}}