CVE-2020-11044

In FreeRDP greater than 1.2 and before 2.0.0, a double free in updatereadcachebitmapv3order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0...

CVE-2020-11048

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0...

CVE-2020-11045: Out-of-bounds Read

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in updatereadbitmapdata that allows client memory to be read to an image buffer. The result displayed on screen as colour...

CVE-2020-11045

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in updatereadbitmapdata that allows client memory to be read to an image buffer. The result displayed on screen as colour...

CVE-2020-11045

CVE-2020-11045 refers to FreeRDP and describes an out-of-bounds read in update_read_bitmap_data that can cause client memory to be read into an image buffer, with the display affected (shown as color). The connected advisories ( MiracleLinux, Rocky Linux/AlmaLinux, Debian, Red Hat, Oracle Linux, ...

CVE-2020-11045 Out-of-bounds Read in FreeRDP

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in updatereadbitmapdata that allows client memory to be read to an image buffer. The result displayed on screen as colour...

CVE-2020-11045

In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in updatereadbitmapdata that allows client memory to be read to an image buffer. The result displayed on screen as colour...

Security fix for the ALT Linux 9 package freerdp version 2.0.0-alt5

2.0.0-alt5 built April 15, 2020 Andrey Cherepanov in task 249869 April 10, 2020 Andrey Cherepanov - New version 2.0.0 Fixes: CVE-2020-11521, CVE-2020-11522, CVE-2020-11523, CVE-2020-11524, CVE-2020-11525, CVE-2020-11526...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26304)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26303)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

Out-of-bounds access vulnerability in freerdp

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. An out-of-bounds access vulnerability exists in freerdp, which can be exploited by an attacker to connect with malformed data for out-of-bounds access...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26301)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26302)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

Denial of Service Vulnerability in FreeRDP

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

FreeRDP -- multiple vulnerabilities

The FreeRDP changelog reports 14 CVEs addressed after 2.0.0-rc4...

PT-2020-2558

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.0 Description The issue is caused by an integer overflow in size calculation when using /video redirection, allowing a manipulated server to instruct the client to allocate a buffer with a smaller size than...

PT-2020-3473

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.0 through 2.0.0-rc4 Description The issue is related to an out-of-bounds read in the libfreerdp/gdi/gdi.c file of FreeRDP. This can potentially allow a remote attacker to gain unauthorized access to protected information...

PT-2020-2559

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.0 Description The issue is related to an out-of-bounds read in the rfx process message tileset function of the FreeRDP implementation of the remote desktop protocol. This can be exploited by a remote attacker to...

PT-2020-2557

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.0 Description The issue is caused by an integer overflow in the implementation of the FreeRDP protocol, allowing a remote attacker to impact the confidentiality and integrity of protected information. When using a...

PT-2020-3475

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.1 through 2.0.0-rc4 Description The issue is caused by an integer overflow in the update recv order function of the FreeRDP RDP client. This can allow a remote attacker to gain unauthorized access to protected information. T...