78 matches found
SUSE-SU-2024:1856-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec bsc1223353. - CVE-2024-32659: Fixed out-of-bounds read if nWidth == 0 and nHeight == 0 bsc1223346 - CVE-2024-32660: Fixed client crash via invalid huge allocation size...
SUSE-SU-2024:1835-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec bsc1223353. - CVE-2024-32659: Fixed out-of-bounds read if nWidth == 0 and nHeight == 0 bsc1223346 - CVE-2024-32660: Fixed client crash via invalid huge allocation size...
SUSE-SU-2024:1610-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-32039: Fixed an out-of-bounds write with variables of type uint32 bsc1223293 - CVE-2024-32040: Fixed a integer underflow when using the 'NSC' codec bsc1223294 - CVE-2024-32041: Fixed an out-of-bounds read in StreamGetRemainingLength...
SUSE-SU-2024:1609-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-32039: Fixed an out-of-bounds write with variables of type uint32 bsc1223293 - CVE-2024-32040: Fixed a integer underflow when using the 'NSC' codec bsc1223294 - CVE-2024-32041: Fixed an out-of-bounds read in StreamGetRemainingLength...
SUSE-SU-2024:0648-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed am integer overflow in freerdpbitmapplanarcontextreset bsc1219049...
SUSE-SU-2023:4893-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2023-39350: Fixed incorrect offset calculation leading to DoS bsc1214856. - CVE-2023-39351: Fixed Null Pointer Dereference leading DoS in RemoteFX bsc1214857. - CVE-2023-39352: Fixed Invalid offset validation leading to Out Of Bound Write...
SUSE-SU-2023:4611-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2023-39350: Fixed incorrect offset calculation leading to DoS bsc1214856. - CVE-2023-39351: Fixed Null Pointer Dereference leading DoS in RemoteFX bsc1214857. - CVE-2023-39352: Fixed Invalid offset validation leading to Out Of Bound Write...
MGASA-2023-0318 Updated freerdp packages fix security vulnerabilities
This issue affects Clients only: Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and proper length validation is not performed, an Integer Underflow occurs, leading to a Denial of Service DOS vulnerability...
SUSE-SU-2023:0400-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39316: Fixed out of bound read in zgfx decoder bsc1205512. - CVE-2022-39317: Fixed undefined behaviour in zgfx decoder bsc1205512. - CVE-2022-39320: Fixed heap buffer overflow in urbdrc channel bsc1205512. - CVE-2022-39347: Fixed...
SUSE-SU-2023:0399-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39316: Fixed out of bound read in zgfx decoder bsc1205512. - CVE-2022-39317: Fixed undefined behaviour in zgfx decoder bsc1205512. - CVE-2022-39320: Fixed heap buffer overflow in urbdrc channel bsc1205512. - CVE-2022-39347: Fixed...
MGASA-2022-0474 Updated freerdp packages fix security vulnerability
Affected versions of FreeRDP are missing input length validation in 'drive' channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. CVE-2022-41877...
MGASA-2022-0447 Updated freerdp packages fix security vulnerability
In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. CVE-2022-39316 Affected versions of FreeRDP are missing a range check for input...
SUSE-SU-2022:4293-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39318: Fixed division by zero in urbdrc bsc1205563. - CVE-2022-39319: Fixed missing input buffer length check in urbdrc bsc1205564...
MGASA-2022-0437 Updated freerdp packages fix security vulnerability
FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. CVE-2022-39282 All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as...
SUSE-SU-2022:3984-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39282: Fix to init data read by /parallel command line switch. bsc1204258 - CVE-2022-39283: Fix to prevent video channel from reading uninitialized data. bsc1204257...
SUSE-SU-2022:2993-1 Security update for freerdp
This update for freerdp fixes the following issues: - Fixed two input validation issues bsc1191895: - CVE-2021-41159: Fixed an improper validation of client input for gateway connections. - CVE-2021-41160: Fixed improper region checks that could lead to memory corruption...
SUSE-SU-2022:2891-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2021-41159: Fixed improper validation of client input bsc1191895. - CVE-2022-41160: Fixed improper region checks bsc1191895...
SUSE-SU-2022:2354-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-24882: Fixed incorrect check parameters in NTLM bsc1198919. - CVE-2022-24883: Fixed authentication against invalid SAM files bsc1198921...
SUSE-SU-2022:2352-1 Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-24882: Fixed incorrect check parameters in NTLM bsc1198919. - CVE-2022-24883: Fixed authentication against invalid SAM files bsc1198921...