Lucene search
+L

5707 matches found

OSV
OSV
added 2021/10/21 7:15 p.m.3 views

DEBIAN-CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

8.8CVSS6.8AI score0.01391EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/21 7:15 p.m.29 views

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

8.8CVSS6.7AI score
SaveExploits0References7
OSV
OSV
added 2021/10/21 7:15 p.m.26 views

CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

8.8CVSS6.7AI score
SaveExploits0References3
NVD
NVD
added 2021/10/21 7:15 p.m.24 views

CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

8.8CVSS0.01391EPSS
SaveExploits0References3
Prion
Prion
added 2021/10/21 7:15 p.m.29 views

Out-of-bounds

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

6.8CVSS8.5AI score0.01391EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2021/10/21 7:15 p.m.31 views

CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

8.8CVSS6.7AI score0.01391EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/21 7:15 p.m.13 views

UBUNTU-CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

8.8CVSS6.7AI score0.0167EPSS
SaveExploits0References4
OSV
OSV
added 2021/10/21 7:15 p.m.7 views

UBUNTU-CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

8.8CVSS7.2AI score0.01391EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/21 12:00 a.m.6 views

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer error vulnerability exists in versions prior to FreeRDP 2.4.1, which stems from the program's inability to validate input data, and a malicious gateway could allow out-of-bounds writes to...

8.8CVSS7.2AI score0.01391EPSS
SaveExploits0References17
CVE
CVE
added 2021/10/21 12:00 a.m.212 views

CVE-2021-41159

FreeRDP before version 2.4.1 with gateway connections (/gt:rpc) is vulnerable to improper input validation that can lead to out-of-bounds writes in client memory, potentially enabling remote code execution. The issue is fixed in 2.4.1. If upgrading is not possible, use /gt:http or connect directl...

8.8CVSS7AI score0.01391EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/10/21 12:00 a.m.34 views

CVE-2021-41160 Improper region checks in FreeRDP allow out of bound write to memory

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

5.3CVSS9AI score0.0167EPSS
SaveExploits0References6
CVE
CVE
added 2021/10/21 12:00 a.m.258 views

CVE-2021-41160

CVE-2021-41160 concerns FreeRDP: a vulnerability where a malicious server can trigger out-of-bounds writes in a connected client by sending graphics updates via GDI or SurfaceCommands . If updates contain a width/height of 0 or out-of-bounds rectangles, missing bounds checks allow writing to memo...

8.8CVSS7AI score0.0167EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2021/10/21 12:00 a.m.38 views

CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

8.8CVSS8.8AI score0.01391EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/10/21 12:00 a.m.53 views

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

8.8CVSS8.9AI score0.0167EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/10/21 12:00 a.m.31 views

CVE-2021-41159 Improper client input validation for FreeRDP gateway connections allows to overwrite memory

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

5.8CVSS8.9AI score0.01391EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/21 12:00 a.m.5 views

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of Remote Desktop Protocol RDP from the Freerdp team.FreeRDP has a buffer error vulnerability in versions prior to 2.4.1, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory,...

8.8CVSS7AI score0.0167EPSS
SaveExploits0References19
AlpineLinux
AlpineLinux
added 2021/10/21 12:00 a.m.57 views

CVE-2021-41159

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections /gt:rpc fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue h...

8.8CVSS7.3AI score0.01391EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/10/21 12:00 a.m.53 views

CVE-2021-41160

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...

8.8CVSS7.3AI score0.0167EPSS
SaveExploits0
NVD
NVD
added 2021/10/18 2:15 p.m.16 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS0.01569EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/18 2:15 p.m.8 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS7.3AI score0.01569EPSS
SaveExploits0References2
Rows per page
Query Builder