CVE-2020-11085

In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdrreadformatlist. Clipboard format data read by client or server might read data out-of-bounds. This has been fixed in 2.1.0. Mitigation To mitigate this flaw in vulnerable versions, clipboard support should be disabled for freerdp...

CVE-2020-11086

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadntlmv2clientchallenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0. Mitigation Mitigation for this issue is either not available or the currently available options do...

USN-4382-1 freerdp vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-4382-1: FreeRDP vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code...

The vulnerability of the FreeRDP remote desktop protocol, caused by a full integer overflow, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FreeRDP remote desktop protocol is due to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the FreeRDP remote desktop protocol, caused by indexing errors, allows a hacker to trigger a service failure or a client-side malfunction, resulting in the absence or distortion of sound.

The vulnerability of the FreeRDP remote desktop protocol is caused by indexing errors. Exploiting this vulnerability allows a malicious actor to cause service failures or malfunctions in the client-side component, resulting in the absence or distortion of audio signals...

The vulnerability of the FreeRDP remote desktop protocol lies in its ability to read data beyond the specified buffer, allowing a malicious actor to cause a service failure.

The vulnerability of the FreeRDP remote desktop protocol exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the FreeRDP remote desktop protocol, related to a memory reclamation error, allows a intruder to trigger a service failure.

The vulnerability of the FreeRDP remote desktop protocol is related to a memory reclamation error. Exploiting this vulnerability can allow a malicious actor to cause service failures from a remote location...

The vulnerability of the FreeRDP remote desktop protocol, caused by a full integer overflow, allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FreeRDP remote desktop protocol is caused by a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

freerdp security update

2:2.0.0-46.rc4.2 - CVE-2020-13398: Fix out-of-bounds write in crypto.c 1841978...

freerdp security update

2:2.0.0-46.rc4.1 - CVE-2020-11521: Fix out-of-bounds write in planar.c 1837632 - CVE-2020-11523: Fix integer overflow in region.c 1837633 - CVE-2020-11524: Fix out-of-bounds write in interleaved.c 1837631...

Remote Code Execution

freerdp is vulnerable to remote code execution. The vulnerability exists as an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...

Denial Of Service (DoS)

freerdp is vulnerable to denial of service DoS. The vulnerability exists as freerdp prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service segfault...

Remote Code Execution

freerdp is vulnerable to remote code execution. The vulnerability exists as FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...

RHEL 8 : freerdp (RHSA-2020:2354)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2354 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

freerdp: Integer overflow in region.c

A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...

freerdp: Out-of-bounds write in planar.c

A flaw was found in freerdp in versions between 1.0 and 2.0.0. An out-of-bounds memory write was found in the planar.c function which could allow an attacker to control data sent from the RDP server to the client. The highest threat from this vulnerability is to data confidentiality and integrity...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20200528)

Security Fixes : - freerdp: Out-of-bounds write in planar.c CVE-2020-11521 - freerdp: Integer overflow in region.c CVE-2020-11523 - freerdp: Out-of-bounds write in interleaved.c CVE-2020-11524 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...