Oracle Linux 9 : freerdp (ELSA-2023-2326)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2326 advisory. - CVE-2022-39282: Fix length checks in parallel driver 2136152 - CVE-2022-39283: Add missing length check in video channel 2136154 - CVE-2022-39316,...

AlmaLinux 9 : freerdp (ALSA-2023:2326)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2326 advisory. - FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read...

Moderate: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: clients using /parallel command line switch might read...

The vulnerability of remote desktop protocol (RDP) clients for Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2023-28267

Remote Desktop Protocol Client Information Disclosure Vulnerability...

CVE-2023-28267

Remote Desktop Protocol Client Information Disclosure Vulnerability...

Information disclosure

Remote Desktop Protocol Client Information Disclosure Vulnerability...

CVE-2023-28267

CVE-2023-28267 is the Remote Desktop Protocol Client Information Disclosure Vulnerability affecting the Microsoft Windows Remote Desktop Client (CPE: cpe:/a:microsoft:remote_desktop_connection). The CVSSv3.1 base score is 6.5 (Medium), with attack vector Network, attack complexity Low, privileges...

CVE-2023-28267 Remote Desktop Protocol Client Information Disclosure Vulnerability

...

CVE-2023-28267 Remote Desktop Protocol Client Information Disclosure Vulnerability

...

Remote Desktop Protocol Client Information Disclosure Vulnerability

...

The vulnerability of the cloud platform for protecting applications from unauthorized access by users and Cisco Duo devices for Mac OS, Windows, and RDP applications allows a intruder to replicate user session credentials and gain unauthorized access to the vulnerable device.

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Mac OS, Windows, and RDP applications relates to bypassing the authentication process by exploiting captured parameters during authentication attempts. Exploiting this vulnerabili...

NewStart CGSL CORE 5.05 / MAIN 5.05 : freerdp Multiple Vulnerabilities (NS-SA-2023-0025)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has freerdp packages installed that are affected by multiple vulnerabilities: - FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1...

CVE-2023-20123

A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and RDP could allow an unauthenticated, physical attacker to replay valid user session credentials and gain unauthorized access to an affected macOS or Windows...

Debian dla-3375 : xrdp - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3375 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3375-1 [email protected]...

LockBit 3.0 Ransomware: Inside the Cyberthreat That's Costing Millions

U.S. government agencies have released a joint cybersecurity advisory detailing the indicators of compromise IoCs and tactics, techniques, and procedures TTPs associated with the notorious LockBit 3.0 ransomware. "The LockBit 3.0 ransomware operations function as a Ransomware-as-a-Service RaaS...

LockBit 3.0 Ransomware: Inside the Cyberthreat That's Costing Millions

U.S. government agencies have released a joint cybersecurity advisory detailing the indicators of compromise IoCs and tactics, techniques, and procedures TTPs associated with the notorious LockBit 3.0 ransomware. "The LockBit 3.0 ransomware operations function as a Ransomware-as-a-Service RaaS...

New Version of Prometei Botnet Infects Over 10,000 Systems Worldwide

An updated version of a botnet malware called Prometei has infected more than 10,000 systems worldwide since November 2022. The infections are both geographically indiscriminate and opportunistic, with a majority of the victims reported in Brazil, Indonesia, and Turkey. Prometei, first observed i...

New Version of Prometei Botnet Infects Over 10,000 Systems Worldwide

An updated version of a botnet malware called Prometei has infected more than 10,000 systems worldwide since November 2022. The infections are both geographically indiscriminate and opportunistic, with a majority of the victims reported in Brazil, Indonesia, and Turkey. Prometei, first observed i...