Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2020-0297
HistoryAug 01, 2020 - 2:25 a.m.

Updated freerdp/remmina packages fix security vulnerability

2020-08-0102:25:42
Gentoo Foundation
advisories.mageia.org
45

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.7%

JSON

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code. The freerdp package has been updated to version 2.1.2 to fix these issues. Also, the remmina package has been updated to version 1.4.7 for compatibility with the updated freerdp.

OSVersionArchitecturePackageVersionFilename
Mageia7noarchfreerdp< 2.1.2-1freerdp-2.1.2-1.mga7
Mageia7noarchremmina< 1.4.7-1remmina-1.4.7-1.mga7

References

Related

suse 1
nessus 59
oraclelinux 6
redhat 11
centos 2
osv 19
rocky 2
amazon 1
almalinux 2
openvas 7
ubuntu 4
freebsd 1
altlinux 3
debian 2
archlinux 2
fedora 2
gentoo 1
ubuntucve 13
veracode 11
cve 15
alpinelinux 6
prion 12
debiancve 11
redhatcve 6
suse
suse
Security update for freerdp (important)
2020-07-26 00:00:00
nessus
nessus
openSUSE Security Update : freerdp (openSUSE-2020-1090)
2020-07-28 00:00:00
Oracle Linux 8 : freerdp / and / vinagre (ELSA-2020-4647)
2020-11-12 00:00:00
CentOS 8 : freerdp and vinagre (CESA-2020:4647)
2021-02-01 00:00:00
oraclelinux
oraclelinux
freerdp security, bug fix, and enhancement update
2020-10-06 00:00:00
freerdp and vinagre security, bug fix, and enhancement update
2020-11-10 00:00:00
freerdp security, bug fix, and enhancement update
2021-05-25 00:00:00
redhat
redhat
(RHSA-2020:4031) Moderate: freerdp security, bug fix, and enhancement update
2020-09-29 07:53:01
(RHSA-2020:4647) Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
(RHSA-2021:1849) Moderate: freerdp security, bug fix, and enhancement update
2021-05-18 06:14:36
centos
centos
freerdp, libwinpr security update
2020-10-20 18:03:15
freerdp, libwinpr security update
2020-06-01 17:27:23
osv
osv
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
freerdp vulnerabilities
2020-11-26 18:47:18
rocky
rocky
freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
freerdp security, bug fix, and enhancement update
2021-05-18 06:14:36
amazon
amazon
Medium: freerdp
2020-10-22 17:36:00
almalinux
almalinux
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
Moderate: freerdp security, bug fix, and enhancement update
2021-05-18 06:14:36
openvas
openvas
Ubuntu: Security Advisory for freerdp (USN-4382-1)
2020-06-05 00:00:00
FreeRDP < 2.1.0 Multiple Vulnerabilities
2020-06-15 00:00:00
Ubuntu: Security Advisory for freerdp2 (USN-4379-1)
2020-06-02 00:00:00
ubuntu
ubuntu
FreeRDP vulnerabilities
2020-06-04 00:00:00
FreeRDP vulnerabilities
2020-11-26 00:00:00
FreeRDP vulnerabilities
2020-06-01 00:00:00
freebsd
freebsd
FreeRDP -- multiple vulnerabilities
2020-04-10 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package freerdp version 2.1.2-alt1
2020-06-25 00:00:00
Security fix for the ALT Linux 9 package freerdp version 2.1.0-alt1
2020-05-13 00:00:00
Security fix for the ALT Linux 9 package freerdp version 2.0.0-alt5
2020-04-15 00:00:00
debian
debian
[SECURITY] [DLA 2356-1] freerdp security update
2020-08-29 23:51:52
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:17
archlinux
archlinux
[ASA-202006-15] freerdp: multiple issues
2020-06-28 00:00:00
[ASA-202005-16] freerdp: information disclosure
2020-05-23 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: freerdp-2.2.0-1.fc32
2020-07-30 17:54:06
[SECURITY] Fedora 31 Update: freerdp-2.2.0-1.fc31
2020-08-01 01:18:39
gentoo
gentoo
FreeRDP: Multiple vulnerabilities
2020-05-14 00:00:00
ubuntucve
ubuntucve
CVE-2020-11018
2020-05-29 00:00:00
CVE-2020-11049
2020-05-07 00:00:00
CVE-2020-11019
2020-05-29 00:00:00
veracode
veracode
Out Of Bounds Read
2020-08-06 21:36:53
Denial Of Service (DoS)
2020-10-01 03:56:27
Privilege Escalation
2020-10-01 03:56:26
cve
cve
CVE-2020-11019
2020-05-29 19:15:00
CVE-2020-11095
2020-06-22 22:15:00
CVE-2020-13398
2020-05-22 18:15:00
alpinelinux
alpinelinux
CVE-2020-11095
2020-06-22 22:15:00
CVE-2020-11525
2020-05-15 17:15:00
CVE-2020-11097
2020-06-22 22:15:00
prion
prion
Out-of-bounds
2020-05-22 18:15:00
Out-of-bounds
2020-05-22 18:15:00
Design/Logic Flaw
2020-05-15 17:15:00
debiancve
debiancve
CVE-2020-11522
2020-05-15 17:15:00
CVE-2020-11095
2020-06-22 22:15:00
CVE-2020-11099
2020-06-22 22:15:00
redhatcve
redhatcve
CVE-2020-11019
2020-06-17 14:33:24
CVE-2020-11018
2020-06-17 14:33:38
CVE-2020-11017
2020-06-17 14:33:23

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.7%

JSON
Related for MGASA-2020-0297
suse1nessus59oraclelinux6redhat11centos2osv19rocky2amazon1almalinux2openvas7ubuntu4freebsd1altlinux3debian2archlinux2fedora2gentoo1ubuntucve13veracode11cve15alpinelinux6prion12debiancve11redhatcve6