Updated freerdp packages fix two vulnerabilities

2014-07-0902:41:00

Gentoo Foundation

advisories.mageia.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.0%

JSON

Updated freerdp packages fix security vulnerabilities: Integer overflows in memory allocations in client/X11/xf_graphics.c in FreeRDP through 1.0.2 allows remote RDP servers to have an unspecified impact through unspecified vectors (CVE-2014-0250). Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet (CVE-2014-0791).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchfreerdp< 1.0.1-2.1freerdp-1.0.1-2.1.mga3
Mageia4noarchfreerdp< 1.0.2-2.1freerdp-1.0.2-2.1.mga4