Lucene search
+L

1200 matches found

OSV
OSV
added 2022/12/09 5:50 p.m.25 views

CVE-2022-23481 Out-of-Bound Read in xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpcapsprocessconfirmactive function. There are no known workarounds for this issue. Users are advised to upgrade...

7.7AI score0.00729EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2022/12/09 5:50 p.m.80 views

CVE-2022-23481

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpcapsprocessconfirmactive function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS6.5AI score0.00729EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2022/12/09 5:48 p.m.4 views

CVE-2022-23493 Out of Bound Read in xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpmmtransprocessdrdynvcchannelclose function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS9.1AI score0.00892EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/12/09 5:48 p.m.31 views

CVE-2022-23493 Out of Bound Read in xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpmmtransprocessdrdynvcchannelclose function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS9.5AI score0.00892EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/12/09 5:48 p.m.27 views

CVE-2022-23493

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpmmtransprocessdrdynvcchannelclose function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS9.2AI score0.00892EPSS
SaveExploits0
OSV
OSV
added 2022/12/09 5:48 p.m.21 views

CVE-2022-23493 Out of Bound Read in xrdp

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpmmtransprocessdrdynvcchannelclose function. There are no known workarounds for this issue. Users are advised to upgrade...

9.1CVSS7.7AI score0.00892EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/12/07 12:0 a.m.26 views

Mageia: Security Advisory (MGASA-2022-0447)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS5.8AI score0.00967EPSS
SaveExploits0References10
Veracode
Veracode
added 2022/11/24 10:40 a.m.32 views

Denial Of Service (DoS)

freerdp is vulnerable vulnerable to denial of service. The vulnerability exists due to an out of bound read in ZGFX decoder component of FreeRDP which allows an attacker to read out of bound data and try to decode it likely resulting in a crash...

5.7CVSS5.1AI score0.00967EPSS
SaveExploits0References10Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/11/23 12:0 a.m.30 views

Ubuntu 16.04 ESM : APR-util vulnerability (USN-5737-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5737-1 advisory. It was discovered that APR-util did not properly handle memory when using SDBM database files. A local attacker with write access to the database can make a progr...

4.7CVSS5.7AI score0.00596EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2022/11/18 12:0 a.m.26 views

Slackware Linux 15.0 / current freerdp Multiple Vulnerabilities (SSA:2022-321-01)

The version of freerdp installed on the remote host is prior to 2.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-321-01 advisory. - FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX...

5.7CVSS5.2AI score0.00967EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2022/11/17 12:0 a.m.24 views

CVE-2022-39316

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

5.7CVSS6.1AI score0.00967EPSS
SaveExploits0References3
NVD
NVD
added 2022/11/16 8:15 p.m.24 views

CVE-2022-39316

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

5.7CVSS0.00967EPSS
SaveExploits0References7
Prion
Prion
added 2022/11/16 8:15 p.m.20 views

Design/Logic Flaw

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

3.5CVSS5.1AI score0.00967EPSS
SaveExploits0References6Affected Software2
CVE
CVE
added 2022/11/16 12:0 a.m.134 views

CVE-2022-39316

CVE-2022-39316 describes an out-of-bounds read in FreeRDP’s ZGFX decoder. Multiple connected advisories confirm the issue affects FreeRDP clients and note the root cause as an out-of-bounds read in ZGFX decoding, leading to potential crashes when processing data from a malicious server. The publi...

5.7CVSS6AI score0.00967EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2022/11/16 12:0 a.m.30 views

CVE-2022-39316 Out of bound read in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

4.8CVSS6AI score0.00967EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/11/16 12:0 a.m.24 views

CVE-2022-39316

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

5.7CVSS5.7AI score0.00967EPSS
SaveExploits0
OSV
OSV
added 2022/11/16 12:0 a.m.22 views

CVE-2022-39316 Out of bound read in FreeRDP

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

4.8CVSS5.3AI score0.00967EPSS
SaveExploits0References9
AlpineLinux
AlpineLinux
added 2022/11/16 12:0 a.m.46 views

CVE-2022-39316

FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely resulting in a crash. This issue has be...

5.7CVSS6.3AI score0.00967EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/11/09 8:55 p.m.30 views

CVE-2021-37789

A flaw was found in stbimage. This issue occurs while processing the frame header information when the plane sampling configurations are calculated in two different ways, generating different results due to integer approximation. The value is further used to access several buffers, leading to a...

8.1CVSS2AI score0.00779EPSS
SaveExploits1References3
Veracode
Veracode
added 2022/11/09 2:18 a.m.32 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The vulnerability exists due to the stack out of bound read in webpimage.cpp, allowing an attacker to cause an application crash by providing a large parameter size and file size to the WebP parser...

5.5CVSS5.9AI score0.01062EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder