Scientific Linux Security Update : freerdp on SL7.x x86_64 (20201001)

Security Fixes : - freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 - freerdp: Out of bound read/write in usb redirection channel CVE-2020-11039 - freerdp: out-of-bounds read in updatereadiconinfo function CVE-2020-11042 - freerdp: out-of-bounds read in...

freerdp, libwinpr security update

CentOS Errata and Security Advisory CESA-2020:4031 An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

openSUSE: Security Advisory for freerdp (openSUSE-SU-2020:1090-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : gd (SUSE-SU-2020:0594-2)

This update for gd fixes the following issues : Security issue fixed : CVE-2018-14553: Fixed a NULL pointer dereference in gdImageClone bsc1165471. CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120. Note that Tenable Network Security has extracted the preceding...

CVE-2020-11038

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the serve...

FreeRDP < 2.1.0 Multiple Vulnerabilities

FreeRDP is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

FreeBSD : FreeRDP -- multiple vulnerabilities (669f3fe8-a07a-11ea-b83e-f0def1f5c5a2)

The FreeRDP changelog reports 14 CVEs addressed after 2.0.0-rc4 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution and use in source VuXML and...

CVE-2020-11038

creationtimestamp| type| source ---|---|--- 2020-05-29 22:55:30+00:00| seen| https://t.me/cibsecurity/12415...

DEBIAN-CVE-2020-11038

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the serve...

CVE-2020-11038

FreeRDP CVE-2020-11038 affects versions

Security fix for the ALT Linux 9 package freerdp version 2.1.0-alt1

2.1.0-alt1 built May 13, 2020 Andrey Cherepanov in task 251515 May 10, 2020 Andrey Cherepanov - New version 2.1.0 Fixes: CVE-2020-11039, CVE-2020-11038, CVE-2020-11043, CVE-2020-11040, CVE-2020-11041, CVE-2020-11019, CVE-2020-11017, CVE-2020-11018...

CVE-2016-11038

creationtimestamp| type| source ---|---|--- 2020-04-07 18:48:15+00:00| seen| https://t.me/cibsecurity/11067...

CVE-2016-11038

The CVE-2016-11038 issue affects Samsung mobile devices (software up to 2016-04-05) involving the Jack audio service. The vulnerability arises from missing access control for shared memory in the Jack service, enabling arbitrary code execution or privilege escalation. Affected component: Jack aud...

Ubuntu: Security Advisory (USN-4316-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 14.2 / current : gd (SSA:2020-083-01)

New gd packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-083-01. The text itself is copyright C Slackware Linux, Inc...

[slackware-security] gd

New gd packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gd-2.3.0-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues: Potential double-free in gdImagePtr. gdImageColorMatch...

openSUSE Security Update : gd (openSUSE-2020-332)

This update for gd fixes the following issues : Security issue fixed : - CVE-2018-14553: Fixed a NULL pointer dereference in gdImageClone bsc1165471. - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120. This update was imported from the SUSE:SLE-15:Update update...

OPENSUSE-SU-2020:0332-1 Security update for gd

This update for gd fixes the following issues: Security issue fixed: - CVE-2018-14553: Fixed a null pointer dereference in gdImageClone bsc1165471. - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120. This update was imported from the SUSE:SLE-15:Update update...

SUSE-SU-2020:0594-1 Security update for gd

This update for gd fixes the following issues: Security issue fixed: - CVE-2018-14553: Fixed a null pointer dereference in gdImageClone bsc1165471. - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120...

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-2335)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...