[SECURITY] [DLA 3606-1] freerdp2 security update

Debian LTS Advisory DLA-3606-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost October 07, 2023 https://wiki.debian.org/LTS Package : freerdp2 Version : 2.3.0+dfsg1-2+deb10u3 CVE ID : CVE-2020-4030 CVE-2020-4031 CVE-2020-4032 CVE-2020-4033 CVE-2020-11017 CVE-2020-110...

Oracle Linux 8 : freerdp / and / vinagre (ELSA-2020-4647)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4647 advisory. freerdp 2:2.1.1-1 - Update to 2.1.1 rhbz1834287. 2:2.0.0-47.rc4 - Fix SCARDINSUFFICIENTBUFFER error rhbz1803054 - Do not advertise /usb in help output...

ALSA-2020:4647 Moderate: freerdp and vinagre security, bug fix, and enhancement update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop. Th...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20201001)

Security Fixes : - freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 - freerdp: Out of bound read/write in usb redirection channel CVE-2020-11039 - freerdp: out-of-bounds read in updatereadiconinfo function CVE-2020-11042 - freerdp: out-of-bounds read in...

freerdp, libwinpr security update

CentOS Errata and Security Advisory CESA-2020:4031 An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

openSUSE: Security Advisory for freerdp (openSUSE-SU-2020:1090-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-11040

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0. Mitigation The flaw can be mitigated by not running the freerdp client with the /gfx connection modes and/or not...

FreeRDP < 2.1.0 Multiple Vulnerabilities

FreeRDP is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

FreeBSD : FreeRDP -- multiple vulnerabilities (669f3fe8-a07a-11ea-b83e-f0def1f5c5a2)

The FreeRDP changelog reports 14 CVEs addressed after 2.0.0-rc4 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution and use in source VuXML and...

DEBIAN-CVE-2020-11040

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0...

CVE-2020-11040

CVE-2020-11040 affects FreeRDP versions up to 2.0.0, where an out-of-bounds data read from memory occurs in clear_decompress_subcode_rlex and is visualized as color on screen. The issue has been fixed in version 2.1.0. Related advisories from Debian, CentOS/RHEL, AlmaLinux, Amazon Linux 2 and CNV...

CVE-2020-11040 Out-of-bounds Read in FreeRDP

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in cleardecompresssubcoderlex, visualized on screen as color. This has been patched in 2.1.0...

Security fix for the ALT Linux 9 package freerdp version 2.1.0-alt1

2.1.0-alt1 built May 13, 2020 Andrey Cherepanov in task 251515 May 10, 2020 Andrey Cherepanov - New version 2.1.0 Fixes: CVE-2020-11039, CVE-2020-11038, CVE-2020-11043, CVE-2020-11040, CVE-2020-11041, CVE-2020-11019, CVE-2020-11017, CVE-2020-11018...