CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

FreeRDP 输入验证错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP Freerdp team. FreeRDP suffers from an input validation error vulnerability that stems from clipboard redirection being enabled by default. An attacker could read arbitrary files from a connected client...

CVE-2021-37594

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSSIZE File Contents Request PDU...

CVE-2021-37594

CVE-2021-37594 affects FreeRDP prior to 2.4.0 on Windows. The flaw is in wf_cliprdr_server_file_contents_request (client/Windows/wf_cliprdr.c), where input checks are missing for a FILECONTENTS_SIZE File Contents Request PDU. This weak input validation could enable an attacker to misuse the clipb...

CVE-2021-37594

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSSIZE File Contents Request PDU...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

CVE-2021-37595

The CVE-2021-37595 entry affects FreeRDP prior to 2.4.0 on Windows. The vulnerability is in wf_cliprdr_server_file_contents_request (file contents PDU) within client/Windows/wf_cliprdr.c, where missing input checks allow improper handling of FILECONTENTS_RANGE requests. This weakness could enable...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

The vulnerability of the `license_read_new_or_upgrade_license_packet` component in the FreeRDP remote desktop protocol, related to reading data beyond the allowed boundaries of the buffer, allows a intruder to access confidential data and also trigger a service failure.

The vulnerability of the licensereadneworupgradelicensepacket component in the FreeRDP remote desktop protocol relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data and also cause servic...

Oracle Linux 8 : freerdp (ELSA-2021-1849)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1849 advisory. 2:2.2.0-1 - Update to 2.2.0 rhbz1881971 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

freerdp security, bug fix, and enhancement update

2:2.2.0-1 - Update to 2.2.0 rhbz1881971...

CentOS 8 : freerdp (CESA-2021:1849)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1849 advisory. - freerdp: out of bound reads resulting in accessing memory location outside of static array PRIMARYDRAWINGORDERFIELDBYTES CVE-2020-11095 - freerdp:...

RHEL 8 : freerdp (RHSA-2021:1849)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1849 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

freerdp: out of bound reads resulting in accessing memory location outside of static array PRIMARY_DRAWING_ORDER_FIELD_BYTES

In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

freerdp: out of bounds read in license_read_new_or_upgrade_license_packet

In FreeRDP before version 2.1.2, there is an out of bounds read in licensereadneworupgradelicensepacket. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2...

freerdp: out of bounds read in TrioParse

In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2...

freerdp: out of bounds read in PRIMARY_DRAWING_ORDER_FIELD_BYTES

In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARYDRAWINGORDERFIELDBYTES. This is fixed in version 2.1.2...

freerdp: out-of-bounds read in RLEDECOMPRESS

In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth 32 are affected. This is fixed in version 2.1.2...

freerdp: integer overflow due to missing input sanitation in rdpegfx channel

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data th...

Moderate: Red Hat Security Advisory: freerdp security, bug fix, and enhancement update

An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...