6279 matches found
freerdp, libwinpr security update
CentOS Errata and Security Advisory CESA-2020:2334 An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31438)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in ntlmreadAuthenticateMessage in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a networked system or product performing operations in memory...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31434)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cleardecompresssubcoderlex in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31437)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrreadformatlist in versions prior to FreeRDP 2.0.0. The vulnerability stems from a network system or product performing operations in memory without...
FreeRDP Input Validation Error Vulnerability (CNVD-2020-31432)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. An input validation error vulnerability exists in the USB redirection channel in FreeRDP 2.0.0 and prior versions. An attacker can exploit this vulnerability to read or write arbitrary memory...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31429)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrserverreceivecapabilities in FreeRDP 2.0.0 and earlier versions. An attacker can exploit this vulnerability with a malicious client to randomly...
FreeRDP Input Validation Error Vulnerability (CNVD-2020-31433)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. An input validation error vulnerability exists in rdpsndrecvwave2pdu in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product that does not properly validate...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31440)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in the 'irp' function in versions of FreeRDP prior to 2.1.0. The vulnerability stems from a networked system or product performing operations on memory without...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31439)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in ntlmreadNegotiateMessage in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory witho...
FreeRDP Input Validation Error Vulnerability (CNVD-2020-31431)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP 2.0.0 and earlier versions. An attacker could exploit the vulnerability to allow the server to manipulate the client in order to write out data bound to a...
FreeRDP Resource Management Error Vulnerability (CNVD-2020-31428)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A resource management error vulnerability exists in cliprdrserverreceivecapabilities in FreeRDP 2.0.0 and earlier versions. An attacker can exploit the vulnerability with the help of specially craft...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31436)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrreadformatlist in versions prior to FreeRDP 2.0.0. The vulnerability stems from a network system or product performing operations in memory without...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31430)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in FreeRDP 2.0.0 and prior versions, which stems from the program reading an invalid array index when the logger is set to 'WLOGTRACE'. An attacker can exploit...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31435)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in rdpsndrecvwave2pdu in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory without...
RHEL 8 : freerdp (RHSA-2020:2336)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2336 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...
RHEL 8 : freerdp (RHSA-2020:2335)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2335 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...
CVE-2020-11089
In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite. This has been fixed in 2.1.0...
CVE-2020-11089
In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite. This has been fixed in 2.1.0...