Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2020-0297
HistoryAug 01, 2020 - 2:25 a.m.

Updated freerdp/remmina packages fix security vulnerability

2020-08-0102:25:42
Gentoo Foundation
advisories.mageia.org
56

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS

0.02

Percentile

88.9%

JSON

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code. The freerdp package has been updated to version 2.1.2 to fix these issues. Also, the remmina package has been updated to version 1.4.7 for compatibility with the updated freerdp.

OSVersionArchitecturePackageVersionFilename
Mageia7noarchfreerdp< 2.1.2-1freerdp-2.1.2-1.mga7
Mageia7noarchremmina< 1.4.7-1remmina-1.4.7-1.mga7

References

Related

nessus 56
suse 1
openvas 32
oraclelinux 5
redhat 10
osv 15
almalinux 2
rocky 2
amazon 1
centos 2
ubuntu 4
freebsd 1
altlinux 3
archlinux 2
debian 2
fedora 2
gentoo 1
ubuntucve 6
redhatcve 7
cve 7
debiancve 5
veracode 8
nvd 7
cvelist 6
alpinelinux 4
prion 8
nessus
nessus
openSUSE Security Update : freerdp (openSUSE-2020-1090)
2020-07-28 00:00:00
Oracle Linux 8 : freerdp / and / vinagre (ELSA-2020-4647)
2020-11-12 00:00:00
CentOS 8 : freerdp and vinagre (CESA-2020:4647)
2021-02-01 00:00:00
suse
suse
Security update for freerdp (important)
2020-07-26 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0297)
2022-01-28 00:00:00
openSUSE: Security Advisory for freerdp (openSUSE-SU-2020:1090-1)
2020-07-27 00:00:00
Ubuntu: Security Advisory (USN-4382-1)
2020-06-05 00:00:00
oraclelinux
oraclelinux
freerdp security, bug fix, and enhancement update
2020-10-06 00:00:00
freerdp and vinagre security, bug fix, and enhancement update
2020-11-10 00:00:00
freerdp security, bug fix, and enhancement update
2021-05-25 00:00:00
redhat
redhat
(RHSA-2020:4647) Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
(RHSA-2020:4031) Moderate: freerdp security, bug fix, and enhancement update
2020-09-29 07:53:01
(RHSA-2021:1849) Moderate: freerdp security, bug fix, and enhancement update
2021-05-18 06:14:36
osv
osv
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
freerdp vulnerabilities
2020-11-26 18:47:18
almalinux
almalinux
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
Moderate: freerdp security, bug fix, and enhancement update
2021-05-18 06:14:36
rocky
rocky
freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
freerdp security, bug fix, and enhancement update
2021-05-18 06:14:36
amazon
amazon
Medium: freerdp
2020-10-22 17:36:00
centos
centos
freerdp, libwinpr security update
2020-10-20 18:03:15
freerdp, libwinpr security update
2020-06-01 17:27:23
ubuntu
ubuntu
FreeRDP vulnerabilities
2020-06-04 00:00:00
FreeRDP vulnerabilities
2020-11-26 00:00:00
FreeRDP vulnerabilities
2020-06-01 00:00:00
freebsd
freebsd
FreeRDP -- multiple vulnerabilities
2020-04-10 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package freerdp version 2.1.2-alt1
2020-06-25 00:00:00
Security fix for the ALT Linux 9 package freerdp version 2.1.0-alt1
2020-05-13 00:00:00
Security fix for the ALT Linux 9 package freerdp version 2.0.0-alt5
2020-04-15 00:00:00
archlinux
archlinux
[ASA-202006-15] freerdp: multiple issues
2020-06-28 00:00:00
[ASA-202005-16] freerdp: information disclosure
2020-05-23 00:00:00
debian
debian
[SECURITY] [DLA 2356-1] freerdp security update
2020-08-29 23:51:52
[SECURITY] [DLA 3606-1] freerdp2 security update
2023-10-07 18:09:17
fedora
fedora
[SECURITY] Fedora 31 Update: freerdp-2.2.0-1.fc31
2020-08-01 01:18:39
[SECURITY] Fedora 32 Update: freerdp-2.2.0-1.fc32
2020-07-30 17:54:06
gentoo
gentoo
FreeRDP: Multiple vulnerabilities
2020-05-14 00:00:00
ubuntucve
ubuntucve
CVE-2020-11018
2020-05-29 00:00:00
CVE-2020-11049
2020-05-07 00:00:00
CVE-2020-11019
2020-05-29 00:00:00
redhatcve
redhatcve
CVE-2020-11019
2020-06-17 14:33:24
CVE-2020-11017
2020-06-17 14:33:23
CVE-2020-11098
2020-07-08 11:20:45
cve
cve
CVE-2020-11019
2020-05-29 19:15:10
CVE-2020-11086
2020-05-29 20:15:10
CVE-2020-11095
2020-06-22 22:15:11
debiancve
debiancve
CVE-2020-11095
2020-06-22 22:15:11
CVE-2020-11522
2020-05-15 17:15:11
CVE-2020-11096
2020-06-22 22:15:12
veracode
veracode
Privilege Escalation
2020-10-01 03:56:26
Out Of Bounds Read
2020-08-06 21:36:53
Denial Of Service (DoS)
2020-10-01 03:56:27
nvd
nvd
CVE-2020-11095
2020-06-22 22:15:11
CVE-2020-11096
2020-06-22 22:15:12
CVE-2020-11017
2020-05-29 16:15:09
cvelist
cvelist
CVE-2020-11095 Global OOB read in update_recv_primary_order in FreeRDP
2020-06-22 00:00:00
CVE-2020-11522
2020-05-15 16:10:32
CVE-2020-11018 Out of bound read in cliprdr_server_receive_capabilities in FreeRDP
2020-05-29 00:00:00
alpinelinux
alpinelinux
CVE-2020-11095
2020-06-22 22:15:11
CVE-2020-11097
2020-06-22 22:15:12
CVE-2020-11096
2020-06-22 22:15:12
prion
prion
Design/Logic Flaw
2020-05-15 17:15:00
Design/Logic Flaw
2020-05-29 20:15:00
Out-of-bounds
2020-05-22 18:15:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS

0.02

Percentile

88.9%

JSON
Related for MGASA-2020-0297
nessus56suse1openvas32oraclelinux5redhat10osv15almalinux2rocky2amazon1centos2ubuntu4freebsd1altlinux3archlinux2debian2fedora2gentoo1ubuntucve6redhatcve7cve7debiancve5veracode8nvd7cvelist6alpinelinux4prion8