Moderate: freerdp security, bug fix, and enhancement update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The following packages have been upgraded to a later upstream version: freerdp 2.2.0...

RLSA-2021:1849 Moderate: freerdp security, bug fix, and enhancement update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The following packages have been upgraded to a later upstream version: freerdp 2.2.0...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2020-2343)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : freerdp (EulerOS-SA-2020-1937)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite,...

Fedora 31 : 2:freerdp (2020-a3432485db)

Bugfix and CVE release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Fedora 32 : 2:freerdp (2020-8d5f86e29a)

Bugfix and CVE release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

[ASA-202006-15] freerdp: multiple issues

Arch Linux Security Advisory ASA-202006-15 ========================================== Severity: High Date : 2020-06-28 CVE-ID : CVE-2020-4030 CVE-2020-4031 CVE-2020-4032 CVE-2020-4033 CVE-2020-11095 CVE-2020-11096 CVE-2020-11097 CVE-2020-11098 CVE-2020-11099 Package : freerdp Type : multiple issu...

Security fix for the ALT Linux 9 package freerdp version 2.1.2-alt1

2.1.2-alt1 built June 25, 2020 Andrey Cherepanov in task 253866 June 23, 2020 Andrey Cherepanov - New version. - Fixes: + CVE-2020-4033 Out of bound read in RLEDECOMPRESS + CVE-2020-4031 Use-After-Free in gdiSelectObject + CVE-2020-4032 Integer casting vulnerability in updaterecvsecondaryorder +...

CVE-2020-4033 OOB Read in RLEDECOMPRESS in FreeRDP

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected. This is fixed in version 2.1.2...

CVE-2020-4033

CVE-2020-4033 : In FreeRDP before 2.1.2, there is an out-of-bounds read in RLEDECOMPRESS. All FreeRDP-based clients with sessions at color depth

Ubuntu 18.04 LTS : libmysofa vulnerability (USN-4033-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4033-1 advisory. It was discovered that a libmysofa component does not properly validate multiplications and additions, and may crash with some specific input. Tenable has extract...

Ubuntu: Security Advisory (USN-4033-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Content Navigator is vulnerable to cross-site scripting.

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4033 DESCRIPTION: IBM Content Navigator is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

CVE-2018-4033

CVE-2018-4033 affects MacPaw’s CleanMyMac X (tested with version 4.04). The vulnerability resides in the helper protocol’s moveToTrashItemAtPath function: a nil fourth argument allows any local application to call the function as root, enabling modification/deletion of root-file-system items. Cis...

CVE-2017-4033

...

CVE-2017-4033

CVE-2017-4033 is rejected/not used per the initial description.

Debian DSA-4033-1 : konversation - security update

Joseph Bisch discovered that Konversation, an user friendly Internet Relay Chat IRC client for KDE, could crash when parsing certain IRC color formatting codes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Oracle: Security Advisory (ELSA-2009-1642)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4033

Samsung SBeam allows remote attackers to read arbitrary images by leveraging an NFC connection to access the HTTP server on port 15000...

CVE-2015-4033

Samsung SBeam contains a vulnerability in its NFC-based peer-to-peer setup. When an NFC connection is established, an HTTP server on port 15000 can be started, allowing a remote attacker to read/download images from the device. ZDI explicitly notes that the attacker must be within NFC range and t...