Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusUbuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.UBUNTU_USN-4382-2.NASL
HistoryNov 26, 2020 - 12:00 a.m.

Ubuntu 18.04 LTS : FreeRDP vulnerabilities (USN-4382-2)

2020-11-2600:00:00
Ubuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
17
JSON

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4382-2 advisory.

  • In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading a attacker-defined amount of client memory (32bit unsigned -> 4GB) to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has been patched in 2.0.0. (CVE-2020-11042)

  • In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.
    (CVE-2020-11045)

  • In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read. (CVE-2020-11046)

  • In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session.
    No data extraction is possible. This has been fixed in 2.0.0. (CVE-2020-11048)

  • In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed in 2.0.0. (CVE-2020-11058)

  • libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
    (CVE-2020-11521)

  • libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read. (CVE-2020-11522)

  • libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.
    (CVE-2020-11523)

  • libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read.
    (CVE-2020-11525)

  • libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.
    (CVE-2020-11526)

  • An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396)

  • An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.
    (CVE-2020-13397)

  • An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c. (CVE-2020-13398)

Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.

##
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-4382-2. The text
# itself is copyright (C) Canonical, Inc. See
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered
# trademark of Canonical, Inc.
##

include('compat.inc');

if (description)
{
  script_id(143270);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/21");

  script_cve_id(
    "CVE-2020-11042",
    "CVE-2020-11045",
    "CVE-2020-11046",
    "CVE-2020-11048",
    "CVE-2020-11058",
    "CVE-2020-11521",
    "CVE-2020-11522",
    "CVE-2020-11523",
    "CVE-2020-11525",
    "CVE-2020-11526",
    "CVE-2020-13396",
    "CVE-2020-13397",
    "CVE-2020-13398"
  );
  script_xref(name:"USN", value:"4382-2");

  script_name(english:"Ubuntu 18.04 LTS : FreeRDP vulnerabilities (USN-4382-2)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in
the USN-4382-2 advisory.

  - In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It
    allows reading a attacker-defined amount of client memory (32bit unsigned -> 4GB) to an intermediate
    buffer. This can be used to crash the client or store information for later retrieval. This has been
    patched in 2.0.0. (CVE-2020-11042)

  - In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that
    allows client memory to be read to an image buffer. The result displayed on screen as colour.
    (CVE-2020-11045)

  - In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize
    that could lead to a later out-of-bounds read. (CVE-2020-11046)

  - In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session.
    No data extraction is possible. This has been fixed in 2.0.0. (CVE-2020-11048)

  - In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could
    lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect
    due to an invalid data read. This has been fixed in 2.0.0. (CVE-2020-11058)

  - libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2.0.0-rc4 has an Out-of-bounds Write.
    (CVE-2020-11521)

  - libfreerdp/gdi/gdi.c in FreeRDP > 1.0 through 2.0.0-rc4 has an Out-of-bounds Read. (CVE-2020-11522)

  - libfreerdp/gdi/region.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Integer Overflow.
    (CVE-2020-11523)

  - libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read.
    (CVE-2020-11525)

  - libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.
    (CVE-2020-11526)

  - An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been
    detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396)

  - An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been
    detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.
    (CVE-2020-13397)

  - An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been
    detected in crypto_rsa_common in libfreerdp/crypto/crypto.c. (CVE-2020-13398)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-4382-2");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-13398");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/05/07");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/11/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/11/26");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:freerdp-x11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-cache1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-client1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-codec1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-common1.1.0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-core1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-crypto1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-gdi1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-locale1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-plugins-standard");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-primitives1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-rail1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libfreerdp-utils1.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-asn1-0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-bcrypt0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-credentials0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-credui0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-crt0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-crypto0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-dsparse0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-environment0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-error0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-file0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-handle0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-heap0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-input0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-interlocked0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-io0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-library0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-path0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-pipe0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-pool0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-registry0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-rpc0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-sspi0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-sspicli0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-synch0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-sysinfo0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-thread0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-timezone0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-utils0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-winhttp0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libwinpr-winsock0.1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libxfreerdp-client1.1");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2020-2023 Canonical, Inc. / NASL script (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('18.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 18.04', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '18.04', 'pkgname': 'freerdp-x11', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-cache1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-client1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-codec1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-common1.1.0', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-core1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-crypto1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-dev', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-gdi1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-locale1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-plugins-standard', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-primitives1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-rail1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libfreerdp-utils1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-asn1-0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-bcrypt0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-credentials0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-credui0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-crt0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-crypto0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-dev', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-dsparse0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-environment0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-error0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-file0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-handle0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-heap0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-input0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-interlocked0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-io0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-library0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-path0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-pipe0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-pool0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-registry0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-rpc0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-sspi0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-sspicli0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-synch0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-sysinfo0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-thread0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-timezone0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-utils0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-winhttp0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libwinpr-winsock0.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'},
    {'osver': '18.04', 'pkgname': 'libxfreerdp-client1.1', 'pkgver': '1.1.0~git20140921.1.440916e+dfsg1-15ubuntu1.18.04.2'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (osver && pkgname && pkgver) {
    if (ubuntu_check(osver:osver, pkgname:pkgname, pkgver:pkgver)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_WARNING,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'freerdp-x11 / libfreerdp-cache1.1 / libfreerdp-client1.1 / etc');
}
VendorProductVersionCPE
canonicalubuntu_linux18.04cpe:/o:canonical:ubuntu_linux:18.04:-:lts
canonicalubuntu_linuxfreerdp-x11p-cpe:/a:canonical:ubuntu_linux:freerdp-x11
canonicalubuntu_linuxlibfreerdp-cache1.1p-cpe:/a:canonical:ubuntu_linux:libfreerdp-cache1.1
canonicalubuntu_linuxlibfreerdp-client1.1p-cpe:/a:canonical:ubuntu_linux:libfreerdp-client1.1
canonicalubuntu_linuxlibfreerdp-codec1.1p-cpe:/a:canonical:ubuntu_linux:libfreerdp-codec1.1
canonicalubuntu_linuxlibfreerdp-common1.1.0p-cpe:/a:canonical:ubuntu_linux:libfreerdp-common1.1.0
canonicalubuntu_linuxlibfreerdp-core1.1p-cpe:/a:canonical:ubuntu_linux:libfreerdp-core1.1
canonicalubuntu_linuxlibfreerdp-crypto1.1p-cpe:/a:canonical:ubuntu_linux:libfreerdp-crypto1.1
canonicalubuntu_linuxlibfreerdp-devp-cpe:/a:canonical:ubuntu_linux:libfreerdp-dev
canonicalubuntu_linuxlibfreerdp-gdi1.1p-cpe:/a:canonical:ubuntu_linux:libfreerdp-gdi1.1
Rows per page:
1-10 of 471

Related

ubuntu 3
openvas 22
osv 15
nessus 53
debian 1
altlinux 1
gentoo 1
archlinux 1
oraclelinux 7
redhat 11
rocky 1
amazon 1
almalinux 1
centos 3
mageia 1
freebsd 1
prion 11
debiancve 11
suse 1
veracode 12
cve 11
alpinelinux 8
ubuntucve 10
redhatcve 12
ubuntu
ubuntu
FreeRDP vulnerabilities
2020-11-26 00:00:00
FreeRDP vulnerabilities
2020-06-04 00:00:00
FreeRDP vulnerabilities
2020-06-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4382-2)
2022-08-26 00:00:00
Debian: Security Advisory (DLA-2356-1)
2020-08-30 00:00:00
Ubuntu: Security Advisory (USN-4382-1)
2020-06-05 00:00:00
osv
osv
freerdp vulnerabilities
2020-11-26 18:47:18
freerdp - security update
2020-08-30 00:00:00
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
nessus
nessus
Debian DLA-2356-1 : freerdp security update
2020-08-31 00:00:00
Ubuntu 16.04 LTS : FreeRDP vulnerabilities (USN-4382-1)
2020-06-05 00:00:00
EulerOS 2.0 SP5 : freerdp (EulerOS-SA-2020-1917)
2020-09-02 00:00:00
debian
debian
[SECURITY] [DLA 2356-1] freerdp security update
2020-08-29 23:51:52
altlinux
altlinux
Security fix for the ALT Linux 9 package freerdp version 2.0.0-alt5
2020-04-15 00:00:00
gentoo
gentoo
FreeRDP: Multiple vulnerabilities
2020-05-14 00:00:00
archlinux
archlinux
[ASA-202005-16] freerdp: information disclosure
2020-05-23 00:00:00
oraclelinux
oraclelinux
freerdp and vinagre security, bug fix, and enhancement update
2020-11-10 00:00:00
freerdp security, bug fix, and enhancement update
2020-10-06 00:00:00
freerdp security update
2020-06-05 00:00:00
redhat
redhat
(RHSA-2020:4647) Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
(RHSA-2020:4031) Moderate: freerdp security, bug fix, and enhancement update
2020-09-29 07:53:01
(RHSA-2020:2336) Important: freerdp security update
2020-05-28 18:01:54
rocky
rocky
freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
amazon
amazon
Medium: freerdp
2020-10-22 17:36:00
almalinux
almalinux
Moderate: freerdp and vinagre security, bug fix, and enhancement update
2020-11-03 12:23:37
centos
centos
freerdp, libwinpr security update
2020-10-20 18:03:15
freerdp, libwinpr security update
2020-06-01 17:27:23
freerdp security update
2020-06-04 20:08:00
mageia
mageia
Updated freerdp/remmina packages fix security vulnerability
2020-08-01 02:25:42
freebsd
freebsd
FreeRDP -- multiple vulnerabilities
2020-04-10 00:00:00
prion
prion
Out-of-bounds
2020-05-22 18:15:00
Out-of-bounds
2020-05-22 18:15:00
Out-of-bounds
2020-05-22 18:15:00
debiancve
debiancve
CVE-2020-11522
2020-05-15 17:15:00
CVE-2020-13397
2020-05-22 18:15:00
CVE-2020-11058
2020-05-12 21:15:00
suse
suse
Security update for freerdp (important)
2020-07-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-10-01 03:56:28
Arbitrary Code Execution
2020-06-06 03:34:51
Denial Of Service (DoS)
2020-08-06 21:33:37
cve
cve
CVE-2020-11522
2020-05-15 17:15:00
CVE-2020-13398
2020-05-22 18:15:00
CVE-2020-11526
2020-05-15 17:15:00
alpinelinux
alpinelinux
CVE-2020-11525
2020-05-15 17:15:00
CVE-2020-13398
2020-05-22 18:15:00
CVE-2020-11526
2020-05-15 17:15:00
ubuntucve
ubuntucve
CVE-2020-11525
2020-05-15 00:00:00
CVE-2020-11058
2020-05-12 00:00:00
CVE-2020-13397
2020-05-22 00:00:00
redhatcve
redhatcve
CVE-2020-11058
2020-05-14 14:04:20
CVE-2020-13398
2020-05-28 15:55:59
CVE-2020-11521
2020-05-15 13:27:06
JSON
Related for UBUNTU_USN-4382-2.NASL
ubuntu3openvas22osv15nessus53debian1altlinux1gentoo1archlinux1oraclelinux7redhat11rocky1amazon1almalinux1centos3mageia1freebsd1prion11debiancve11suse1veracode12cve11alpinelinux8ubuntucve10redhatcve12