Lucene search

K
freebsdFreeBSD1F0421B1-8398-11ED-973D-002B67DFC673
HistoryDec 24, 2022 - 12:00 a.m.

freerdp -- multiple vulnerabilities

2022-12-2400:00:00
vuxml.freebsd.org
6

5.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:N/A:P

0.002 Low

EPSS

Percentile

52.6%

FreeRDP reports:

GHSA-5w4j-mrrh-jjrm: Out of bound read in zgfx decoder.
GHSA-99cm-4gw7-c8jh: Undefined behaviour in zgfx decoder.
GHSA-387j-8j96-7q35: Division by zero in urbdrc channel.
GHSA-mvxm-wfj2-5fvh: Missing length validation in urbdrc channel.
GHSA-qfq2-82qr-7f4j: Heap buffer overflow in urbdrc channel.
GHSA-c5xq-8v35-pffg: Missing path sanitation with drive channel.
GHSA-pmv3-wpw4-pw5h: Missing input length validation in drive channel.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreerdp< 2.9.0UNKNOWN

5.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:N/A:P

0.002 Low

EPSS

Percentile

52.6%