ROS-20221017-01

A vulnerability in the FreeRDP remote desktop protocol implementation is related to the disclosure of uninitialized data on unix systems when using the /parallel command line switch. uninitialized data on unix systems when using the /parallel command line switch. Exploitation of the vulnerability...

CVE-2022-39282

CVE-2022-39282 affects FreeRDP: Unix-based FreeRDP clients using the /parallel port redirection may read uninitialized memory and send it to the server to which the client is connected; FreeRDP server implementations are not affected. The issue has been patched in FreeRDP 2.8.1. If upgrading is n...

CVE-2022-39283

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...

CVE-2022-39283 FreeRDP may read and display out of bounds data

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...

CVE-2022-39283

CVE-2022-39283 affects FreeRDP: all FreeRDP-based clients using the “/video” switch may read uninitialized data, decode it as audio/video, and display it. FreeRDP servers are not affected. A fix is available in version 2.8.1; if upgrading is not possible, do not use the “/video” switch. The conne...

Iranian Islamic Revolutionary Guard Corps Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations

CISA, Federal Bureau of Investigation FBI, National Security Agency NSA, U.S. Cyber Command USCC - Cyber National Mission Force CNMF, Department of the Treasury, Australian Cyber Security Centre ACSC, Canadian Centre for Cyber Security CCCS, and United Kingdom’s National Cyber Security Centre NCS...

PT-2022-5749 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the SPNEGO Extended Negotiation NEGOEX security mechanism in Microsoft Windows, which can lead to information disclosure. It allows remote attackers to...

Amazon Linux 2022 : freerdp, freerdp-devel, freerdp-libs (ALAS2022-2022-082)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-082 advisory. A flaw was found in the FreeRDP client when it fails to validate input data when using gateway connections. This flaw could allow a malicious gateway to send a specially crafted input to a clie...

SUSE SLED15: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2022:2993-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2993-1 advisory. - Fixed two input validation issues bsc1191895: - CVE-2021-41159: Fixed an improper validation o...

SUSE SLED12: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2022:2890-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2890-1 advisory. - CVE-2021-41159: Fixed improper validation of client input bsc1191895. - CVE-2022-41160: Fixed improper regio...

SUSE SLED15: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2022:2891-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2891-1 advisory. - CVE-2021-41159: Fixed improper validation of client input bsc1191895. - CVE-2022-41160: Fixed...

2021 Top Malware Strains

Summary Immediate Actions You Can Take Now to Protect Against Malware: • Patch all systems and prioritize patching known exploited vulnerabilities. • Enforce multifactor authentication MFA. • Secure Remote Desktop Protocol RDP and other risky services. • Make offline backups of your data. • Provi...

August 16, 2022—KB5016693 (OS Build 20348.946) Preview

None None...

Feds: Zeppelin Ransomware Resurfaces with New Compromise, Encryption Tactics

Zeppelin ransomware is back and employing new compromise and encryption tactics in its recent campaigns against various vertical industries—particularly healthcare—as well as critical infrastructure organizations, the feds are warning. Threat actors deploying the ransomware as a service RaaS are...

#StopRansomware: MedusaLocker

Summary Actions to take today to mitigate cyber threats from ransomware: • Prioritize remediating known exploited vulnerabilities. • Train users to recognize and report phishing attempts. • Enable and enforce multifactor authentication. Note: this joint Cybersecurity Advisory CSA is part of an...

CISA and ACSC Release Top 2021 Malware Strains

CISA and the Australian Cyber Security Centre ACSC have published a joint Cybersecurity Advisory on the top malware strains observed in 2021. Malicious cyber actors often use malware to covertly compromise and then gain access to a computer or mobile device. As malicious cyber actors have been...

The vulnerability of the NTLM protocol implementation in the RDP client FreeRDP allows a hacker to disclose sensitive information.

The vulnerability of the NTLM protocol implementation in the RDP client FreeRDP is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to disclose sensitive information that is protected by the security mechanism...

Microsoft clamps down on RDP brute-force attacks in Windows 11

It wasnt so long ago that we were wondering what improvements Windows 11 would make in the security stakes. Well, we havent had to wait too long to find out. Windows 11 build 22528.1000 and up will tackle one of the more common entry points for network intruders. Namely, trying to prevent the bru...

SUSE SLED12 / SLES12 Security Update : freerdp (SUSE-SU-2022:2352-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2352-1 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN...

SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2022:2353-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2353-1 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN...