PT-2020-3475

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.1 through 2.0.0-rc4 Description The issue is caused by an integer overflow in the update recv order function of the FreeRDP RDP client. This can allow a remote attacker to gain unauthorized access to protected information. T...

PT-2020-2560

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 and earlier Description The issue is related to an out-of-bound data read from memory in the clear decompress subcode rlex function, which can be visualized on screen as color. This can potentially allow a remote attacke...

PT-2020-3474

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.0 through 2.0.0-rc4 Description The issue is related to an out-of-bounds write operation in the memory buffer of the FreeRDP client. This can be exploited by a remote attacker to cause a denial of service. The problem is...

PT-2020-2562

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.1.0 Description The issue is caused by a read of an invalid array index when FreeRDP is run with the logger set to "WLOG TRACE". This could lead to a possible application crash, and data could be printed as a string...

PT-2020-6516

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.0 through 2.0.0-rc4 Description The issue is related to an out-of-bounds write in the implementation of the remote desktop protocol in FreeRDP. This allows a remote attacker to access confidential data, compromise its...

PT-2020-2564

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 and earlier Description A possible resource exhaustion issue exists due to out of bound reads, potentially allowing malicious clients to trigger memory allocation with random size, leading to a denial of service. This...

PT-2020-3476

Name of the Vulnerable Software and Affected Versions FreeRDP versions 1.0 through 2.0.0-rc4 Description The issue is caused by an integer overflow in the update recv order function of the FreeRDP RDP client, which can allow a remote attacker to gain unauthorized access to protected information...

PT-2020-2561

Name of the Vulnerable Software and Affected Versions FreeRDP versions less than or equal to 2.0.0 Description The issue arises from an outside controlled array index being used unchecked for data used as configuration for the sound backend, such as alsa, oss, or pulse. This could lead to a crash...

PT-2020-12510 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: The issue involves an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in version 2.0.0. Recommendations: For versions 1.1 through 1.9, updat...

PT-2020-12519 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: A stream out-of-bounds seek in rdp read font capability set could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data...

PT-2020-6920 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: The issue is related to an out-of-bounds read in the autodetect recv bandwidth measure results function. A malicious server can extract up to 8 bytes of client memory with a manipulated message by...

PT-2020-6921 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.2 through 1.2 simplified to FreeRDP versions greater than 1.2 and before 2.0.0 Description: The issue is related to a double free error in the update read cache bitmap v3 order function of the FreeRDP RDP client. This error...

PT-2020-12506 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: The issue is an out-of-bounds read in the update read icon info function. This allows an attacker to read a defined amount of client memory, up to 4GB, into an intermediate buffer. The impact can ...

Vulnerability of the zgfx_decompress() function in the RDP client FreeRDP, allowing a hacker to execute arbitrary code

The vulnerability of the zgfxdecompress function in the RDP client of FreeRDP arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the NTLM authentication module in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the NTLM authentication module in the RDP client FreeRDP arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

CVE-2019-17177

libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-2147)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-1284)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-2262)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for freerdp (EulerOS-SA-2019-2455)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...