7103 matches found
EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2020-1848)
According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB read vulnerability has been detected in ntlmreadChallengeMessage in...
Updated freerdp packages fix security vulnerability
Integer overflow due to missing input sanitation in rdpegfx channel. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on invalid length arguments to a memcpy CVE-2020-1510...
MGASA-2020-0338 Updated freerdp packages fix security vulnerability
Integer overflow due to missing input sanitation in rdpegfx channel. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on invalid length arguments to a memcpy CVE-2020-1510...
SUSE-SU-2020:2272-1 Security update for freerdp
This update for freerdp fixes the following issues: freerdp was updated to version 2.1.2 bsc1171441,bsc1173247 and jscECO-2006: - CVE-2020-11017: Fixed a double free which could have denied the server's service. - CVE-2020-11018: Fixed an out of bounds read which a malicious clients could have...
FreeRDP Buffer Overflow DoS
The vulnerability of the RDP client FreeRDP relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
FreeRDP update_recv_order Unauthorized Access
The vulnerability of the updaterecvorder function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
FreeRDP Buffer Overflow Unauthorized Access
The vulnerability of the RDP client FreeRDP relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
FreeRDP RDP Unauthenticated Access
The vulnerability of the updaterecvorder function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
RHEL 7 : freerdp (RHSA-2020:2334)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2334 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...
Out Of Bounds Read
FreeRDP is vulnerable to an out of bound reads. It occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...
Denial Of Service (DoS)
FreeRDP is vulnerable to denial of service. A global OOB read in updatereadcachebitmapv3order allows an attacker to crash the application and potentially obtain confidential information...
Privilege Escalation
freerdp is vulnerable to privilege escalation. The vulnerability exists as an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES...
Out-of-bound Read
FreeRDP is vulnerable to out-of-bound read. It is due to a flaw in glyphcacheput. This affects all FreeRDP clients with +glyph-cache option enabled...
Denial Of Service (DoS)
FreeRDP is vulnerable to denial of service. An out of bounds read in licensereadneworupgradelicensepacket allows an attacker to crash the application...
Denial Of Service (DoS)
freerdp is vulnerable to denial of service DoS. The vulnerability exists in FreeRDP before version 2.1.2, there is an integer casting vulnerability in updaterecvsecondaryorder. All clients with +glyph-cache /relax-order-checks are affected...
Denial Of Service (DoS)
freerdp is vulnerable to denial of service. The vulnerability exists through an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected...
Integer Overflow
freerdp is vulnerable to Integer Overflow. The vulnerability is present because the input rectangles received from the server are not checked against local surface coordinates and are blindly accepted. This oversight allows an attacker to potentially crash the application by sending malicious dat...
Denial Of Service (DoS)
FreeRDP is vulnerable to denial of service. A use-after-free in gdiSelectObject causes clients using compatibility mode with /relax-order-checks to be vulnerable to an application crash...
Information Disclosure
FreeRDP is vulnerable to information disclosure. An out-of-bounds OOB read vulnerability in securityfipsdecrypt in libfreerdp/core/security.c due to an uninitialized value allows an attacker to retrieve confidential information...
Denial Of Service (DoS)
freerdp is vulnerable to Denial Of Service DoS. The vulnerability exists through an out-of-bounds OOB read vulnerability has been detected in ntlmreadChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlmmessage.c...