ALSA-2021:1849 Moderate: freerdp security, bug fix, and enhancement update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The following packages have been upgraded to a later upstream version: freerdp 2.2.0...

11097.u.proapkmod.com Cross Site Scripting vulnerability OBB-1306733

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Fedora 31 : 2:freerdp (2020-a3432485db)

Bugfix and CVE release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Fedora 32 : 2:freerdp (2020-8d5f86e29a)

Bugfix and CVE release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

[ASA-202006-15] freerdp: multiple issues

Arch Linux Security Advisory ASA-202006-15 ========================================== Severity: High Date : 2020-06-28 CVE-ID : CVE-2020-4030 CVE-2020-4031 CVE-2020-4032 CVE-2020-4033 CVE-2020-11095 CVE-2020-11096 CVE-2020-11097 CVE-2020-11098 CVE-2020-11099 Package : freerdp Type : multiple issu...

Security fix for the ALT Linux 9 package freerdp version 2.1.2-alt1

2.1.2-alt1 built June 25, 2020 Andrey Cherepanov in task 253866 June 23, 2020 Andrey Cherepanov - New version. - Fixes: + CVE-2020-4033 Out of bound read in RLEDECOMPRESS + CVE-2020-4031 Use-After-Free in gdiSelectObject + CVE-2020-4032 Integer casting vulnerability in updaterecvsecondaryorder +...

CVE-2020-11097 OOB read in ntlm_av_pair_get in FreeRDP

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

CVE-2020-11097

CVE-2020-11097: In FreeRDP before 2.1.2, there is an out-of-bounds read that accesses memory outside the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. The root cause is an OOB read in ntlm_av_pair_get, with the issue fixed in FreeRDP 2.1.2. Public advisories and Debian ARNs co...

CVE-2019-11097

Improper directory permissions in the installer for IntelR Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of...

CVE-2019-11097

CVE-2019-11097 records improper directory permissions in the installer for Intel® Management Engine Consumer Driver for Windows (pre-11.8.70/11.11.70/11.22.70/12.0.45/13.0.10/14.0.10) and Intel® TXE (pre-3.1.70/4.0.20). This may allow an authenticated local user to escalate privileges. Affected c...

CVE-2018-11097

CVE-2018-11097 affects cloudwu/cstring (a C-based string library) with a memory leak vulnerability present up to 2016-11-09 that can lead to a program crash. The incident is documented with CVSS metrics indicating network access, no authentication required, and an availability impact rated high (...

CVE-2017-1000177

CVE-2017-1000177 is a reservation/duplicate of CVE-2017-11097. The connected records describe the underlying issue as: SWFTools 0.9.2 processes a crafted SWF file in swfc, causing a NULL pointer dereference in dict_lookup() in lib/q.c. This is the same vulnerability tracked under CVE-2017-11097; ...

CVE-2017-11097

When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dictlookup function in lib/q.c...

CVE-2017-11097

CVE-2017-11097 affects SWFTools 0.9.2, where processing a crafted file in swfc can trigger a NULL pointer dereference in dict_lookup() (lib/q.c). The incident is documented with CVSS both 2.0/3.0 vectors, indicating network attack potential with partial impact to confidentiality, integrity, and a...