freerdp: out of bounds read in PRIMARY_DRAWING_ORDER_FIELD_BYTES

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

freerdp: out of bound reads resulting in accessing memory location outside of static array PRIMARY_DRAWING_ORDER_FIELD_BYTES

In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

Moderate: Red Hat Security Advisory: freerdp security, bug fix, and enhancement update

An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

freerdp: integer overflow due to missing input sanitation in rdpegfx channel

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data th...

freerdp: out of bounds read in license_read_new_or_upgrade_license_packet

In FreeRDP before version 2.1.2, there is an out of bounds read in licensereadneworupgradelicensepacket. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2...

RLSA-2021:1849 Moderate: freerdp security, bug fix, and enhancement update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The following packages have been upgraded to a later upstream version: freerdp 2.2.0...

ALSA-2021:1849 Moderate: freerdp security, bug fix, and enhancement update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The following packages have been upgraded to a later upstream version: freerdp 2.2.0...

Moderate: freerdp security, bug fix, and enhancement update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The following packages have been upgraded to a later upstream version: freerdp 2.2.0...

freerdp security, bug fix, and enhancement update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2021-1785)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : freerdp (EulerOS-SA-2021-1785)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libfreerdp/core/update.c in FreeRDP versions 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.CVE-2020-11526 - In FreeRDP greater than 1.1 and...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2021-1675)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : freerdp (EulerOS-SA-2021-1675)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in updatereadiconinfo. It allows reading a attacker-defined amount...

Lazy-RDP - Script For AutomRDPatic Scanning And Brute-Force

Script For AutomRDPatic Scanning And Brute-Force. Demo Video: Lazy-RDP over SSH: Script for automatic scanning of the address list for the presence of open 3389 ports, and then selecting the method and starting busting pair login / password. The script is tuned for Kali linux 2.0, Kali linux 2016...

FreeRDP < 2.1.2 Multiple Vulnerabilities

FreeRDP is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the gdi_SelectObject component in the FreeRDP remote desktop protocol allows a hacker to trigger a service failure.

The vulnerability of the gdiSelectObject component in the FreeRDP remote desktop protocol implementation is related to the use of a memory area after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the FreeRDP remote desktop protocol components, related to reading data beyond the allowed buffer limits, allows attackers to access confidential data and cause service failures.

The vulnerability of the FreeRDP remote desktop protocol implementation relates to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and also cause service failures...

The vulnerability of the PRIMARY_DRAWING_ORDER_FIELD_BYTES function in the FreeRDP remote desktop protocol implementation, related to reading data beyond the buffer’s acceptable limits, allows attackers to access confidential data and cause service interruptions.

The vulnerability of the PRIMARYDRAWINGORDERFIELDBYTES function in the FreeRDP remote desktop protocol implementation is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

The vulnerability of the TrioParse component in the implementation of the remote desktop protocol FreeRDP allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the TrioParse component in the FreeRDP remote desktop protocol lies in its ability to read data from a buffer beyond acceptable limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data and also cause service failures...

The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol allows a intruder to gain access to confidential data and also trigger a service failure.

The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and also cause service failures...