[SECURITY] [DLA 3654-1] freerdp2 security update

Debian LTS Advisory DLA-3654-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost November 17, 2023 https://wiki.debian.org/LTS Package : freerdp2 Version : 2.3.0+dfsg1-2+deb10u4 CVE ID : CVE-2021-41160 CVE-2022-24883 CVE-2022-39282 CVE-2022-39283 CVE-2022-39316...

CVE-2023-39283

An SMM memory corruption vulnerability in the SMM driver SMRAM write in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation...

CVE-2023-39283

An SMM memory corruption vulnerability in the SMM driver SMRAM write in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation...

CVE-2023-39283

CVE-2023-39283 affects FreeRDP clients. The vulnerability is an out-of-bounds/read issue in FreeRDP when handling certain video-related input, potentially allowing a remote attacker to trigger a crash or compromise via crafted RDP data. Affected products are FreeRDP-based clients (not servers); i...