UBUNTU-CVE-2019-17178

HuffmanTreemakeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...

CVE-2019-17177

libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...

CVE-2019-17177

CVE-2019-17177 refers to a memory leak in FreeRDP: in libfreerdp/codec/region.c, a supplied realloc pointer (first argument) is also used for a realloc return value, leading to memory leaks in FreeRDP versions through 1.1.x and 2.x through 2.0.0-rc4. The connected documents confirm the vulnerable...

CVE-2019-17177

libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...

CVE-2019-17178

CVE-2019-17178 concerns a memory leak in HuffmanTree_makeFromFrequencies() within lodepng.c, as used in WinPR-based FreeRDP and related products, reported for builds up to 2019-09-28. The underlying issue is a memory-management bug where a supplied realloc pointer (the first argument to realloc) ...

Vulnerability of the update_read_bitmap_update() function in the RDP client FreeRDP, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the updatereadbitmapupdate function in the RDP client FreeRDP arises from the execution of the operation outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

Vulnerability of the nsc_rle_decode() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code

The vulnerability of the nscrledecode function in the RDP client FreeRDP is related to buffer overflow in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

Vulnerability of the gdi_Bitmap_Decompress() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gdiBitmapDecompress function in the FreeRDP RDP client is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

freerdp, libwinpr, vinagre security update

CentOS Errata and Security Advisory CESA-2019:2157 An update for freerdp and vinagre is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS 7 : freerdp / vinagre (CESA-2019:2157)

An update for freerdp and vinagre is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Scientific Linux Security Update : freerdp and vinagre on SL7.x x86_64 (20190806)

The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop. The following packages have been upgraded to a later upstream version: freerdp 2.0.0. Security Fixes : - freerdp: out of bounds read in drdynvcprocesscapabilityrequest CVE-2018-1000852 C Tenable Network Security...

freerdp and vinagre security, bug fix, and enhancement update

freerdp 2.0.0-1.rc4 - Update to 2.0.0-rc4 1291254 vinagre 3.22.0-12 - Apply the patch - Resolves: 1569552 3.22.0-11 - Set maximum length of RDP password to 255 characters - Resolves: 1569552 3.22.0-10 - Make vinagre build with FreeRDP 2 library - Resolves: 1680229...

NewStart CGSL CORE 5.04 / MAIN 5.04 : freerdp Multiple Vulnerabilities (NS-SA-2019-0074)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has freerdp packages installed that are affected by multiple vulnerabilities: - FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function updatereadbitmapupdate and...

RHEL 7 : freerdp and vinagre (RHSA-2019:2157)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2157 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP server...

Out-of-bounds Read

freerdp is vulnerable to out-of-bounds read. An unknown vulnerability allows the RDP server to read the client's memory and potentially execute arbitrary code on the victim's system...

freerdp: out of bounds read in drdynvc_process_capability_request

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...

Low: Red Hat Security Advisory: freerdp and vinagre security, bug fix, and enhancement update

An update for freerdp and vinagre is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Integer Overflow

FreeRDP is vulnerable to Integer Overflow. The count variable in function updatereadbitmapupdate was assigned as UINT16, potentially leading to a heap-based buffer overflow, resulting in a memory corruption and probably remote code execution...

EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2019-1646)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment that results in a memory corruption...

Ubuntu: Security Advisory (USN-3845-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...