Denial Of Service (DoS)

freerdp is vulnerable vulnerable to denial of service. The vulnerability exists due to an out of bound read in ZGFX decoder component of FreeRDP which allows an attacker to read out of bound data and try to decode it likely resulting in a crash...

Out Of Bound Reads

freerdp is vulnerable to out-of-bound reads. The vulnerability exists due to missing a range check for input offset index in ZGFX decoder which allows an attacker read out of bound data and send it back to the server...

Denial Of Service (DoS)

freerdp is vulnerable vulnerable to denial of service. The vulnerability exists due to missing input validation in urbdrc channel which allows an attacker to cause an application crash with division by zero...

Out Of Bound Reads

freerdp is vulnerable to Out Of Bound Reads. The vulnerability exists due to missing input length validation in the urbdrc channel which allows an attacker to read out of bound data and send it back to the server...

Out Of Bound Reads

freerdp is vulnerable to out-of-bound reads. The vulnerability exists due to attempting integer addition on too narrow types leads which allows an attacker read out of bound data and send it back to the server...

Information Disclosure

freerdp is vulnerable to information disclosure. The vulnerability exists due to missing path canonicalization and base path check for drive channel which allows an attacker to gain access and read files outside the shared directory...

Out Of Bound Reads

freerdp is vulnerable to Out Of Bound Reads. The vulnerability exists due to missing input length validation in drive channel which allows an attacker to gain access to the system...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : FreeRDP vulnerabilities (USN-5734-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5734-1 advisory. It was discovered that FreeRDP incorrectly handled certain data lenghts. A malicious server could use this issue to cause FreeRDP...

Ubuntu: Security Advisory (USN-5734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5734-1: FreeRDP vulnerabilities

It was discovered that FreeRDP incorrectly handled certain data lenghts. A malicious server could use this issue to cause FreeRDP clients to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu...

USN-5734-1 freerdp2 vulnerabilities

It was discovered that FreeRDP incorrectly handled certain data lenghts. A malicious server could use this issue to cause FreeRDP clients to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu...

ROS-20221121-02

A vulnerability in the FreeRDP remote desktop protocol implementation is related to the fact that there is no range check for the input offset index in the ZGFX decoder. Exploitation of the vulnerability could allow an attacker acting remotely to read the associated data and attempt to decode it...

The vulnerability of the RDP server FreeRDP, related to deficiencies in the authentication process, allows attackers to bypass the authentication process.

The vulnerability of the RDP server FreeRDP is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

FreeRDP path traversal vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP is vulnerable to a path traversal vulnerability that stems from a lack of path normalization and basic path checking for the "drive" channel. An attacker could use this vulnerability to read...

Slackware: Security Advisory (SSA:2022-321-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeRDP Buffer Overflow Vulnerability (CNVD-2022-78857)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team.FreeRDP suffers from a buffer overflow vulnerability that stems from an out-of-bounds read in the ZGFX decoder component. No detailed vulnerability details are currently available...

FreeRDP Buffer Overflow Vulnerability (CNVD-2022-78858)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team.FreeRDP is vulnerable to a buffer overflow vulnerability that stems from the fact that FreeRDP may attempt integer addition on types that are too narrow, which can result in a buffer allocation that ...

Slackware Linux 15.0 / current freerdp Multiple Vulnerabilities (SSA:2022-321-01)

The version of freerdp installed on the remote host is prior to 2.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-321-01 advisory. - FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX...

[slackware-security] freerdp

New freerdp packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/freerdp-2.9.0-i586-1slack15.0.txz: Upgraded. Fixed multiple client side input validation issues. For more information, see:...

CVE-2022-39319

An out-of-bound read vulnerability was discovered in FreeRDP due to improper input length validation in client/datatransfer.c in the urbdrc channel. A malicious server can trigger an out-of-bounds read by tricking a FreeRDP based client to read out-of-bound data and send it back to the server...